<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="636">
<package pkgid="6afb5c544ebe5f0aaf70083d0f2be8fa2ed0d40546cb10b97ea738839316b1d8" name="SoQt-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="3bd3b50dd6b6324c42af16c8367fe69e151b7b9e2b772fdee636afbb3f5f20fc" name="SoQt-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="4deca534856bd9c6239a7ac64a8f1132d3d81986cc564b37b23527343ff317c1" name="SoQt-debugsource" arch="s390x">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="6b1614b1be2e6331eb06fa898e9114ccaae96903279f53bcfca7df51f7756ad9" name="SoQt-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="77a41edc86cfc904cd5589b3180d08e67cbf99a752be0f9458a3f7c58d88dac0" name="cacti-spine-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="5374621303e784ad629ad86d266ae182f83ccdcaf2dd9a77704673eae88ed36d" name="cacti-spine-debuginfo" arch="i586">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="6c216adad07d03cf586e310ee950782b3c9e979e359b1d3cef6b7bce28ba5896" name="cacti-spine-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="7ce4dde0590816d9013cf21f0b2d418bb6636c8aeaf5242f78c61b17190a4af4" name="cacti-spine-debuginfo" arch="s390x">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="53b66d8b04343edf2b64f1636d43146d11fc514bd0a17cb3c171b612c00b6762" name="cacti-spine-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="9edd39a50ed39a2b72c67f3d5196f0dfc588aa6ecb7226af382f30a464308e7c" name="cacti-spine-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="56d515e8d1c9250732c9987c3d9fdc351907bab44a2297e12aa42d5749dc0642" name="cacti-spine-debugsource" arch="i586">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="87c19fa25ab8bd075a6f1f4a4984e935d728f3137bb6a582517ed8e7f2f25fe0" name="cacti-spine-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="26815957a0a8056b29ed0782f9e8ad23bde854e1a466a2a9e0112d808efafd51" name="cacti-spine-debugsource" arch="s390x">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="9219684f0430621f2c271c1acbc03478a4334b8a7cfa9d1893ca3a69be26c7fd" name="cacti-spine-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.22" rel="bp154.2.3.1"/>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1605096000">- cacti-spine 1.2.15:
  * Special characters may not always be ignored properly</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1607342400">- cacti-spine 1.2.16:
  * Some developer debug log messages falsely labeled as WARNINGS
  * Remove the need of the dos2unix program
  * Fix Spine experiencing MySQL socket error 2002 under load
  * Under heavy load MySQL/MariaDB return 2006 and 2013 errors on query
  * Add backtrace output to stderr for signals
  * Add Data Source turnaround time to debug output</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1620216000">- cacti-spine 1.2.17:
  * Avoid triggering DDos detection in firewalls on large systems
  * Use mysql reconnect option properly
  * Fix possible creashes in various operations
  * Fix remote data collectors pushing too much data to main when
    performing diagnostics
  * Make spine more responsive when remote connection is down
  * Fix various MySQL issues
  * Make spine immune to DST changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1629547200">- cacti-spine 1.2.18:
  * Fix missing time parameter on FROM_UNIXTIME function
- add cacti-spine-1.2.18-Fix-non-void-return.patch to fix the same</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636200000">- cacti-spine 1.2.19:
  * Fix 1ssues with polling loop may skip some datasources
  * Fix ping no longer works due to hostname changes
  * Fix RRD steps are not always calculated correctly
  * Fix unable to build when DES no longer supported
  * Fix IPv6 devices are not properly parsed
  * Reduce a number of compiler warnings
  * Fix compiler warnings due to lack of return in thread_mutex_trylock
  * Fix Spine will not look at non-timetics uptime when sysUpTimeInstance overflows
  * Improve performance of Cacti poller on heavily loaded systems
- drop cacti-spine-1.2.18-Fix-non-void-return.patch, upstream</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650628800">- cacti-spine 1.2.20:
  * Add support for newer versions of MySQL/MariaDB
  * When checking for uptime of device, don't assume a non-response
    is always fatal
  * Fix description and command trunctation issues
  * Improve spine performance when only one snmp agent port is in
    use</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1653825600">- cacti-spine 1.2.21:
  * Disable DES if Net-SNMP doesn't have it</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664712000">- cacti-spine 1.2.22, delivering a number of bug fixes:
  * When polling time is exceed, spine does not always exit as expected
  * Spine logging at `-V 5` includes an extra line feed
  * Incorrect SNMP responses can cause spine to crash
  * Properly handle devices that timeout responding to the Extended Uptime
  * MariaDB can cause spine to abort prematurely despite error handling
  * Spine should log the error time when exiting via signal</changelog>
</package>
<package pkgid="7e6927df271053a0ffd02ef6e421420cf5048663914815d9bf739c613830dbc5" name="chafa-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="e508bed3d5f8996d7df4d6639e943718971afd7e8ec8c10152313db2013a6518" name="chafa-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="d7a4a09695cd3909140dd3a3335e71992aef61fb3632db80f61367420cdd7d01" name="chafa-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="f5f89abe14f97efab24fee1d4c9db7e5e747486a5438d81603a39666db55774a" name="chafa-debuginfo" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="d4fc8ad05c5e8238507a87330611ee024e973579979f32f43b3bedc3813730ef" name="chafa-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="37df92292da88cfc42be5231b5c23309703598a5dc6ac16a2737db1f287031f2" name="chafa-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="172c2a1d276c7153a64942990de186c7e374ee7ae4f642e3dade16581c4db04d" name="chafa-debugsource" arch="i586">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="90c5b708cfe0c467bc2f324eee98584970380f426085bd9c1b03a37fe3618597" name="chafa-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="9d6586ba35ca4eb8f70592ea478b16de11d90e735481a6000882730602d96756" name="chafa-debugsource" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="342ac5ac043f74f7e12ea3a4e30a1d4efda0f24799d3b4a0c989d2ea63b3d5cf" name="chafa-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="ae6de5af0f67125e2cb17309df7f3fb5615391dda7bf677f0872542154e5ee4f" name="chromedriver-debuginfo" arch="aarch64">
  <version epoch="0" ver="102.0.5005.61" rel="bp154.2.5.3"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1642680000">- Revert chromium-94-ffmpeg-roll.patch on TW: fix moved to
  FFmpeg</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642766400">- Chromium 97.0.4692.99 (boo#1194919):
  * CVE-2022-0289: Use after free in Safe browsing
  * CVE-2022-0290: Use after free in Site isolation
  * CVE-2022-0291: Inappropriate implementation in Storage
  * CVE-2022-0292: Inappropriate implementation in Fenced Frames
  * CVE-2022-0293: Use after free in Web packaging
  * CVE-2022-0294: Inappropriate implementation in Push messaging
  * CVE-2022-0295: Use after free in Omnibox
  * CVE-2022-0296: Use after free in Printing
  * CVE-2022-0297: Use after free in Vulkan
  * CVE-2022-0298: Use after free in Scheduling
  * CVE-2022-0300: Use after free in Text Input Method Editor
  * CVE-2022-0301: Heap buffer overflow in DevTools
  * CVE-2022-0302: Use after free in Omnibox
  * CVE-2022-0303: Race in GPU Watchdog
  * CVE-2022-0304: Use after free in Bookmarks
  * CVE-2022-0305: Inappropriate implementation in Service Worker API
  * CVE-2022-0306: Heap buffer overflow in PDFium
  * CVE-2022-0307: Use after free in Optimization Guide
  * CVE-2022-0308: Use after free in Data Transfer
  * CVE-2022-0309: Inappropriate implementation in Autofill
  * CVE-2022-0310: Heap buffer overflow in Task Manager
  * CVE-2022-0311: Heap buffer overflow in Task Manager
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * fix-tag-dragging-in-Mutter.patch
  * fix-tag-dragging-in-KWin.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
</package>
<package pkgid="2ba2bed280c941737af30ed28ee793450b55366aab112c5c98ab2a9c2524dfa6" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="102.0.5005.61" rel="bp154.2.5.3"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1642680000">- Revert chromium-94-ffmpeg-roll.patch on TW: fix moved to
  FFmpeg</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642766400">- Chromium 97.0.4692.99 (boo#1194919):
  * CVE-2022-0289: Use after free in Safe browsing
  * CVE-2022-0290: Use after free in Site isolation
  * CVE-2022-0291: Inappropriate implementation in Storage
  * CVE-2022-0292: Inappropriate implementation in Fenced Frames
  * CVE-2022-0293: Use after free in Web packaging
  * CVE-2022-0294: Inappropriate implementation in Push messaging
  * CVE-2022-0295: Use after free in Omnibox
  * CVE-2022-0296: Use after free in Printing
  * CVE-2022-0297: Use after free in Vulkan
  * CVE-2022-0298: Use after free in Scheduling
  * CVE-2022-0300: Use after free in Text Input Method Editor
  * CVE-2022-0301: Heap buffer overflow in DevTools
  * CVE-2022-0302: Use after free in Omnibox
  * CVE-2022-0303: Race in GPU Watchdog
  * CVE-2022-0304: Use after free in Bookmarks
  * CVE-2022-0305: Inappropriate implementation in Service Worker API
  * CVE-2022-0306: Heap buffer overflow in PDFium
  * CVE-2022-0307: Use after free in Optimization Guide
  * CVE-2022-0308: Use after free in Data Transfer
  * CVE-2022-0309: Inappropriate implementation in Autofill
  * CVE-2022-0310: Heap buffer overflow in Task Manager
  * CVE-2022-0311: Heap buffer overflow in Task Manager
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * fix-tag-dragging-in-Mutter.patch
  * fix-tag-dragging-in-KWin.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
</package>
<package pkgid="a822b894fa54b3697967d4a767893109f2dedc470c45a510198f3b09244def9d" name="chromedriver-debuginfo" arch="aarch64">
  <version epoch="0" ver="103.0.5060.114" rel="bp154.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
</package>
<package pkgid="69b93f08dfcf76d5651bac16051ed71e60e73156adcdf593718ecc9ba7ce9c3d" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="103.0.5060.114" rel="bp154.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
</package>
<package pkgid="793bbb4873f36cca78d949f009139f750c437d113daf4d30027af8223b8e21cb" name="chromedriver-debuginfo" arch="aarch64">
  <version epoch="0" ver="103.0.5060.134" rel="bp154.2.17.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="340e1c49b27d012741c5c422d214dc59b338982f064025d6c19247afef086332" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="103.0.5060.134" rel="bp154.2.17.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="ef74eb1d38c758a80599f835341459ad2dcd09c8975d18738529edb6c6c08da3" name="chromedriver-debuginfo" arch="aarch64">
  <version epoch="0" ver="104.0.5112.101" rel="bp154.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="486d733362b1894805b3755dfd1add33310669a152ac21016d7fb894e233a7d8" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="104.0.5112.101" rel="bp154.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="64297d2bb75bd0e2da222ce718637a27d5fa41e3f7eb33614e7104a08de887aa" name="chromedriver-debuginfo" arch="aarch64">
  <version epoch="0" ver="105.0.5195.127" rel="bp154.2.29.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="b3910f72d55313170f663bf39c570c69bb44411496e3657f3fab197a220230b3" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="105.0.5195.127" rel="bp154.2.29.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="30945b6cf627f0ed96bf58cc5f0e00a3fe9ff7c57c137f1b3a9ec5f273bef27e" name="chromedriver-debuginfo" arch="aarch64">
  <version epoch="0" ver="107.0.5304.110" rel="bp154.2.43.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
</package>
<package pkgid="9e2853eba244dc881291cb17a3a6dfe898b56266585d799f44097777ff95e029" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="107.0.5304.110" rel="bp154.2.43.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
</package>
<package pkgid="12c1fed5f494bc8672d06d5191ec2aef111d1689ef8a2914e6813c934763c926" name="chromedriver-debuginfo" arch="aarch64">
  <version epoch="0" ver="107.0.5304.121" rel="bp154.2.46.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
</package>
<package pkgid="a41e2c2a70380a74c07d123a6f7e7394d4be6d8665b9d107b594540c0840f364" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="107.0.5304.121" rel="bp154.2.46.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
</package>
<package pkgid="cb169bd1b4f768c8a785721265c47dc3a67db8e8484265da2bffdf5ae4429df2" name="chromedriver-debuginfo" arch="aarch64">
  <version epoch="0" ver="107.0.5304.87" rel="bp154.2.40.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
</package>
<package pkgid="3e8c95b9f2e81b514269adb3fe30108dc9b14db42bc95597754e168db17a503e" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="107.0.5304.87" rel="bp154.2.40.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
</package>
<package pkgid="13ffe63cf099efa6e3a719cd1ce552335a2725bb7fa48cb10f707d4fdb674662" name="chromedriver-debuginfo" arch="aarch64">
  <version epoch="0" ver="108.0.5359.71" rel="bp154.2.49.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
</package>
<package pkgid="8749d60b5a96ecb1bae81160434553122362259546c9aad686d516aa73823de7" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="108.0.5359.71" rel="bp154.2.49.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
</package>
<package pkgid="6d92b0e8906765dac5e6a72044c3cba99e7b2d42982e3beaac428142c1a9e96a" name="chromedriver-debuginfo" arch="aarch64">
  <version epoch="0" ver="108.0.5359.94" rel="bp154.2.52.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
</package>
<package pkgid="234a9d772779e25f1d351f9cfe37eef489dddfe94674ab236ecaee6c1b33e19d" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="108.0.5359.94" rel="bp154.2.52.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
</package>
<package pkgid="c9339e37c3d4c0f0d888404db3f42bf358e62b8bfb8bc1eae8cd4687139898ab" name="chromedriver-debuginfo" arch="aarch64">
  <version epoch="0" ver="112.0.5615.165" rel="bp154.2.84.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675857600">- Chromium 110.0.5481.77 (boo#1208029):
  * CVE-2023-0696: Type Confusion in V8
  * CVE-2023-0697: Inappropriate implementation in Full screen mode
  * CVE-2023-0698: Out of bounds read in WebRTC
  * CVE-2023-0699: Use after free in GPU
  * CVE-2023-0700: Inappropriate implementation in Download
  * CVE-2023-0701: Heap buffer overflow in WebUI
  * CVE-2023-0702: Type Confusion in Data Transfer
  * CVE-2023-0703: Type Confusion in DevTools
  * CVE-2023-0704: Insufficient policy enforcement in DevTools
  * CVE-2023-0705: Integer overflow in Core
  * Various fixes from internal audits, fuzzing and other initiatives
- build with bundled libavif
- dropped patches:
  * chromium-109-compiler.patch
  * chromium-icu72-3.patch
- added patches:
  * chromium-110-compiler.patch
  * chromium-110-system-libffi.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1676548800">- Chromium 110.0.5481.100
  * fix regression on SAP Business Objects web UI
  * fix date formatting behavior change from ICU 72</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677153600">- Chromium 110.0.5481.177 (boo#1208589)
  * CVE-2023-0927: Use after free in Web Payments API
  * CVE-2023-0928: Use after free in SwiftShader
  * CVE-2023-0929: Use after free in Vulkan
  * CVE-2023-0930: Heap buffer overflow in Video
  * CVE-2023-0931: Use after free in Video
  * CVE-2023-0932: Use after free in WebRTC
  * CVE-2023-0933: Integer overflow in PDF
  * CVE-2023-0941: Use after free in Prompts
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678363200">- Chromium 111.0.5563.64
  * New View Transitions API
  * CSS Color Level 4
  * New developer tools in style panel for color functionality
  * CSS added trigonometric functions, additional root font units
    and extended the n-th child pseudo selector.
  * previousslide and nextslide actions are now part of the Media
    Session API
  * A number of security fixes (boo#1209040)
  * CVE-2023-1213: Use after free in Swiftshader
  * CVE-2023-1214: Type Confusion in V8
  * CVE-2023-1215: Type Confusion in CSS
  * CVE-2023-1216: Use after free in DevTools
  * CVE-2023-1217: Stack buffer overflow in Crash reporting
  * CVE-2023-1218: Use after free in WebRTC
  * CVE-2023-1219: Heap buffer overflow in Metrics
  * CVE-2023-1220: Heap buffer overflow in UMA
  * CVE-2023-1221: Insufficient policy enforcement in Extensions API
  * CVE-2023-1222: Heap buffer overflow in Web Audio API
  * CVE-2023-1223: Insufficient policy enforcement in Autofill
  * CVE-2023-1224: Insufficient policy enforcement in Web Payments API
  * CVE-2023-1225: Insufficient policy enforcement in Navigation
  * CVE-2023-1226: Insufficient policy enforcement in Web Payments API
  * CVE-2023-1227: Use after free in Core
  * CVE-2023-1228: Insufficient policy enforcement in Intents
  * CVE-2023-1229: Inappropriate implementation in Permission prompts
  * CVE-2023-1230: Inappropriate implementation in WebApp Installs
  * CVE-2023-1231: Inappropriate implementation in Autofill
  * CVE-2023-1232: Insufficient policy enforcement in Resource Timing
  * CVE-2023-1233: Insufficient policy enforcement in Resource Timing
  * CVE-2023-1234: Inappropriate implementation in Intents
  * CVE-2023-1235: Type Confusion in DevTools
  * CVE-2023-1236: Inappropriate implementation in Internals
- drop patches:
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch
  * chromium-icu72-1.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363201">- Bump Leap's GCC to 12 as Chromium really likes newer standards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363202">- Revert back to GCC 11 on 15.4 as Clang 13 doesn't support GCC 12</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679313600">- Add gcc13-fix.patch in order to support GCC 13.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1679486400">- Chromium 111.0.5563.110 (boo#1209598)
  * CVE-2023-1528: Use after free in Passwords
  * CVE-2023-1529: Out of bounds memory access in WebHID
  * CVE-2023-1530: Use after free in PDF
  * CVE-2023-1531: Use after free in ANGLE
  * CVE-2023-1532: Out of bounds read in GPU Video
  * CVE-2023-1533: Use after free in WebProtect
  * CVE-2023-1534: Out of bounds read in ANGLE</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1679572800">- Update gcc13-fix.patch with few fixes required for aarch64,
  borrowed from Fedora's gcc13 patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1679918400">- Chromium 111.0.5563.147:
  * nth-child() validation performance regression for SAP apps</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1680609600">- Chromium 112.0.5615.49
  * CSS now supports nesting rules.
  * The algorithm to set the initial focus on &lt;dialog&gt; elements was updated.
  * No-op fetch() handlers on service workers are skipped from now on to make navigations faster
  * The setter for document.domain is now deprecated.
  * The recorder in devtools can now record with pierce selectors.
  * Security fixes (boo#1210126):
  * CVE-2023-1810: Heap buffer overflow in Visuals
  * CVE-2023-1811: Use after free in Frames
  * CVE-2023-1812: Out of bounds memory access in DOM Bindings
  * CVE-2023-1813: Inappropriate implementation in Extensions
  * CVE-2023-1814: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2023-1815: Use after free in Networking APIs
  * CVE-2023-1816: Incorrect security UI in Picture In Picture
  * CVE-2023-1817: Insufficient policy enforcement in Intents
  * CVE-2023-1818: Use after free in Vulkan
  * CVE-2023-1819: Out of bounds read in Accessibility
  * CVE-2023-1820: Heap buffer overflow in Browser History
  * CVE-2023-1821: Inappropriate implementation in WebShare
  * CVE-2023-1822: Incorrect security UI in Navigation
  * CVE-2023-1823: Inappropriate implementation in FedCM</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1680868800">- Revert a breaking change with chromium-112-feed_protos.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1681560000">- Chromium 112.0.5615.121:
  * CVE-2023-2033: Type Confusion in V8 (boo#1210478)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1681646400">- Fix Leap 15.4 build failures from default comparison operators
  defined outside of the class definition, a C++20 feature
  adding chromium-112-default-comparison-operators.patch</changelog>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1681905600">- Chromium 112.0.5615.165 (boo#1210618):
  * CVE-2023-2133: Out of bounds memory access in Service Worker API
  * CVE-2023-2134: Out of bounds memory access in Service Worker API
  * CVE-2023-2135: Use after free in DevTools
  * CVE-2023-2136: Integer overflow in Skia
  * CVE-2023-2137: Heap buffer overflow in sqlite
- drop chromium-112-feed_protos.patch</changelog>
</package>
<package pkgid="f6f4ff7a44a224b9fc3544ac0c7a7bee8da8da82ee83e2157f4f2536ed09535b" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="112.0.5615.165" rel="bp154.2.84.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675857600">- Chromium 110.0.5481.77 (boo#1208029):
  * CVE-2023-0696: Type Confusion in V8
  * CVE-2023-0697: Inappropriate implementation in Full screen mode
  * CVE-2023-0698: Out of bounds read in WebRTC
  * CVE-2023-0699: Use after free in GPU
  * CVE-2023-0700: Inappropriate implementation in Download
  * CVE-2023-0701: Heap buffer overflow in WebUI
  * CVE-2023-0702: Type Confusion in Data Transfer
  * CVE-2023-0703: Type Confusion in DevTools
  * CVE-2023-0704: Insufficient policy enforcement in DevTools
  * CVE-2023-0705: Integer overflow in Core
  * Various fixes from internal audits, fuzzing and other initiatives
- build with bundled libavif
- dropped patches:
  * chromium-109-compiler.patch
  * chromium-icu72-3.patch
- added patches:
  * chromium-110-compiler.patch
  * chromium-110-system-libffi.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1676548800">- Chromium 110.0.5481.100
  * fix regression on SAP Business Objects web UI
  * fix date formatting behavior change from ICU 72</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677153600">- Chromium 110.0.5481.177 (boo#1208589)
  * CVE-2023-0927: Use after free in Web Payments API
  * CVE-2023-0928: Use after free in SwiftShader
  * CVE-2023-0929: Use after free in Vulkan
  * CVE-2023-0930: Heap buffer overflow in Video
  * CVE-2023-0931: Use after free in Video
  * CVE-2023-0932: Use after free in WebRTC
  * CVE-2023-0933: Integer overflow in PDF
  * CVE-2023-0941: Use after free in Prompts
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678363200">- Chromium 111.0.5563.64
  * New View Transitions API
  * CSS Color Level 4
  * New developer tools in style panel for color functionality
  * CSS added trigonometric functions, additional root font units
    and extended the n-th child pseudo selector.
  * previousslide and nextslide actions are now part of the Media
    Session API
  * A number of security fixes (boo#1209040)
  * CVE-2023-1213: Use after free in Swiftshader
  * CVE-2023-1214: Type Confusion in V8
  * CVE-2023-1215: Type Confusion in CSS
  * CVE-2023-1216: Use after free in DevTools
  * CVE-2023-1217: Stack buffer overflow in Crash reporting
  * CVE-2023-1218: Use after free in WebRTC
  * CVE-2023-1219: Heap buffer overflow in Metrics
  * CVE-2023-1220: Heap buffer overflow in UMA
  * CVE-2023-1221: Insufficient policy enforcement in Extensions API
  * CVE-2023-1222: Heap buffer overflow in Web Audio API
  * CVE-2023-1223: Insufficient policy enforcement in Autofill
  * CVE-2023-1224: Insufficient policy enforcement in Web Payments API
  * CVE-2023-1225: Insufficient policy enforcement in Navigation
  * CVE-2023-1226: Insufficient policy enforcement in Web Payments API
  * CVE-2023-1227: Use after free in Core
  * CVE-2023-1228: Insufficient policy enforcement in Intents
  * CVE-2023-1229: Inappropriate implementation in Permission prompts
  * CVE-2023-1230: Inappropriate implementation in WebApp Installs
  * CVE-2023-1231: Inappropriate implementation in Autofill
  * CVE-2023-1232: Insufficient policy enforcement in Resource Timing
  * CVE-2023-1233: Insufficient policy enforcement in Resource Timing
  * CVE-2023-1234: Inappropriate implementation in Intents
  * CVE-2023-1235: Type Confusion in DevTools
  * CVE-2023-1236: Inappropriate implementation in Internals
- drop patches:
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch
  * chromium-icu72-1.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363201">- Bump Leap's GCC to 12 as Chromium really likes newer standards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363202">- Revert back to GCC 11 on 15.4 as Clang 13 doesn't support GCC 12</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679313600">- Add gcc13-fix.patch in order to support GCC 13.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1679486400">- Chromium 111.0.5563.110 (boo#1209598)
  * CVE-2023-1528: Use after free in Passwords
  * CVE-2023-1529: Out of bounds memory access in WebHID
  * CVE-2023-1530: Use after free in PDF
  * CVE-2023-1531: Use after free in ANGLE
  * CVE-2023-1532: Out of bounds read in GPU Video
  * CVE-2023-1533: Use after free in WebProtect
  * CVE-2023-1534: Out of bounds read in ANGLE</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1679572800">- Update gcc13-fix.patch with few fixes required for aarch64,
  borrowed from Fedora's gcc13 patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1679918400">- Chromium 111.0.5563.147:
  * nth-child() validation performance regression for SAP apps</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1680609600">- Chromium 112.0.5615.49
  * CSS now supports nesting rules.
  * The algorithm to set the initial focus on &lt;dialog&gt; elements was updated.
  * No-op fetch() handlers on service workers are skipped from now on to make navigations faster
  * The setter for document.domain is now deprecated.
  * The recorder in devtools can now record with pierce selectors.
  * Security fixes (boo#1210126):
  * CVE-2023-1810: Heap buffer overflow in Visuals
  * CVE-2023-1811: Use after free in Frames
  * CVE-2023-1812: Out of bounds memory access in DOM Bindings
  * CVE-2023-1813: Inappropriate implementation in Extensions
  * CVE-2023-1814: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2023-1815: Use after free in Networking APIs
  * CVE-2023-1816: Incorrect security UI in Picture In Picture
  * CVE-2023-1817: Insufficient policy enforcement in Intents
  * CVE-2023-1818: Use after free in Vulkan
  * CVE-2023-1819: Out of bounds read in Accessibility
  * CVE-2023-1820: Heap buffer overflow in Browser History
  * CVE-2023-1821: Inappropriate implementation in WebShare
  * CVE-2023-1822: Incorrect security UI in Navigation
  * CVE-2023-1823: Inappropriate implementation in FedCM</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1680868800">- Revert a breaking change with chromium-112-feed_protos.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1681560000">- Chromium 112.0.5615.121:
  * CVE-2023-2033: Type Confusion in V8 (boo#1210478)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1681646400">- Fix Leap 15.4 build failures from default comparison operators
  defined outside of the class definition, a C++20 feature
  adding chromium-112-default-comparison-operators.patch</changelog>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1681905600">- Chromium 112.0.5615.165 (boo#1210618):
  * CVE-2023-2133: Out of bounds memory access in Service Worker API
  * CVE-2023-2134: Out of bounds memory access in Service Worker API
  * CVE-2023-2135: Use after free in DevTools
  * CVE-2023-2136: Integer overflow in Skia
  * CVE-2023-2137: Heap buffer overflow in sqlite
- drop chromium-112-feed_protos.patch</changelog>
</package>
<package pkgid="5de03fe5d28d770b3572ceb57c3be3eba6c54983e48a7b47b907b704cd6d709b" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="102.0.5005.61" rel="bp154.2.5.3"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1642680000">- Revert chromium-94-ffmpeg-roll.patch on TW: fix moved to
  FFmpeg</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642766400">- Chromium 97.0.4692.99 (boo#1194919):
  * CVE-2022-0289: Use after free in Safe browsing
  * CVE-2022-0290: Use after free in Site isolation
  * CVE-2022-0291: Inappropriate implementation in Storage
  * CVE-2022-0292: Inappropriate implementation in Fenced Frames
  * CVE-2022-0293: Use after free in Web packaging
  * CVE-2022-0294: Inappropriate implementation in Push messaging
  * CVE-2022-0295: Use after free in Omnibox
  * CVE-2022-0296: Use after free in Printing
  * CVE-2022-0297: Use after free in Vulkan
  * CVE-2022-0298: Use after free in Scheduling
  * CVE-2022-0300: Use after free in Text Input Method Editor
  * CVE-2022-0301: Heap buffer overflow in DevTools
  * CVE-2022-0302: Use after free in Omnibox
  * CVE-2022-0303: Race in GPU Watchdog
  * CVE-2022-0304: Use after free in Bookmarks
  * CVE-2022-0305: Inappropriate implementation in Service Worker API
  * CVE-2022-0306: Heap buffer overflow in PDFium
  * CVE-2022-0307: Use after free in Optimization Guide
  * CVE-2022-0308: Use after free in Data Transfer
  * CVE-2022-0309: Inappropriate implementation in Autofill
  * CVE-2022-0310: Heap buffer overflow in Task Manager
  * CVE-2022-0311: Heap buffer overflow in Task Manager
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * fix-tag-dragging-in-Mutter.patch
  * fix-tag-dragging-in-KWin.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
</package>
<package pkgid="a45bc944ca3783dbe82a2b69c5a26c2ef9bae98643c0d375fc5ea05fa9364c2b" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="102.0.5005.61" rel="bp154.2.5.3"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1642680000">- Revert chromium-94-ffmpeg-roll.patch on TW: fix moved to
  FFmpeg</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642766400">- Chromium 97.0.4692.99 (boo#1194919):
  * CVE-2022-0289: Use after free in Safe browsing
  * CVE-2022-0290: Use after free in Site isolation
  * CVE-2022-0291: Inappropriate implementation in Storage
  * CVE-2022-0292: Inappropriate implementation in Fenced Frames
  * CVE-2022-0293: Use after free in Web packaging
  * CVE-2022-0294: Inappropriate implementation in Push messaging
  * CVE-2022-0295: Use after free in Omnibox
  * CVE-2022-0296: Use after free in Printing
  * CVE-2022-0297: Use after free in Vulkan
  * CVE-2022-0298: Use after free in Scheduling
  * CVE-2022-0300: Use after free in Text Input Method Editor
  * CVE-2022-0301: Heap buffer overflow in DevTools
  * CVE-2022-0302: Use after free in Omnibox
  * CVE-2022-0303: Race in GPU Watchdog
  * CVE-2022-0304: Use after free in Bookmarks
  * CVE-2022-0305: Inappropriate implementation in Service Worker API
  * CVE-2022-0306: Heap buffer overflow in PDFium
  * CVE-2022-0307: Use after free in Optimization Guide
  * CVE-2022-0308: Use after free in Data Transfer
  * CVE-2022-0309: Inappropriate implementation in Autofill
  * CVE-2022-0310: Heap buffer overflow in Task Manager
  * CVE-2022-0311: Heap buffer overflow in Task Manager
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * fix-tag-dragging-in-Mutter.patch
  * fix-tag-dragging-in-KWin.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1643889600">- Chromium 98.0.4758.80 (boo#1195420)
  * CVE-2022-0452: Use after free in Safe Browsing
  * CVE-2022-0453: Use after free in Reader Mode
  * CVE-2022-0454: Heap buffer overflow in ANGLE
  * CVE-2022-0455: Inappropriate implementation in Full Screen Mode
  * CVE-2022-0456: Use after free in Web Search
  * CVE-2022-0457: Type Confusion in V8
  * CVE-2022-0459: Use after free in Screen Capture
  * CVE-2022-0460: Use after free in Window Dialog
  * CVE-2022-0461: Policy bypass in COOP
  * CVE-2022-0462: Inappropriate implementation in Scroll
  * CVE-2022-0463: Use after free in Accessibility
  * CVE-2022-0464: Use after free in Accessibility
  * CVE-2022-0465: Use after free in Extensions
  * CVE-2022-0466: Inappropriate implementation in Extensions Platform
  * CVE-2022-0467: Inappropriate implementation in Pointer Lock
  * CVE-2022-0468: Use after free in Payments
  * CVE-2022-0469: Use after free in Cast
  * CVE-2022-0470: Out of bounds memory access in V8
  * Various fixes from internal audits, fuzzing and other initiatives
- drop upstreamed patches:
  * chromium-97-Point-constexpr.patch
- add patches:
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- change chromium-97-compiler.patch to chromium-98-compiler.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1644926400">- Chromium 98.0.4758.102 (boo#1195986)
  * CVE-2022-0603: Use after free in File Manager
  * CVE-2022-0604: Heap buffer overflow in Tab Groups
  * CVE-2022-0605: Use after free in Webstore API
  * CVE-2022-0606: Use after free in ANGLE
  * CVE-2022-0607: Use after free in GPU
  * CVE-2022-0608: Integer overflow in Mojo
  * CVE-2022-0609: Use after free in Animation
  * CVE-2022-0610: Inappropriate implementation in Gamepad API
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1646395200">- Chromium 99.0.4844.51 (boo#1196641)
  * CVE-2022-0789: Heap buffer overflow in ANGLE
  * CVE-2022-0790: Use after free in Cast UI
  * CVE-2022-0791: Use after free in Omnibox
  * CVE-2022-0792: Out of bounds read in ANGLE
  * CVE-2022-0793: Use after free in Views
  * CVE-2022-0794: Use after free in WebShare
  * CVE-2022-0795: Type Confusion in Blink Layout
  * CVE-2022-0796: Use after free in Media
  * CVE-2022-0797: Out of bounds memory access in Mojo
  * CVE-2022-0798: Use after free in MediaStream
  * CVE-2022-0799: Insufficient policy enforcement in Installer
  * CVE-2022-0800: Heap buffer overflow in Cast UI
  * CVE-2022-0801: Inappropriate implementation in HTML parser
  * CVE-2022-0802: Inappropriate implementation in Full screen mode
  * CVE-2022-0803: Inappropriate implementation in Permissions
  * CVE-2022-0804: Inappropriate implementation in Full screen mode
  * CVE-2022-0805: Use after free in Browser Switcher
  * CVE-2022-0806: Data leak in Canvas
  * CVE-2022-0807: Inappropriate implementation in Autofill
  * CVE-2022-0808: Use after free in Chrome OS Shell
  * CVE-2022-0809: Out of bounds memory access in WebXR
- Removed patches:
  * chromium-96-EnumTable-crash.patch
  * chromium-89-missing-cstring-header.patch
  * chromium-95-libyuv-aarch64.patch
  * chromium-95-libyuv-arm.patch
  * chromium-98-MiraclePtr-gcc-ice.patch
  * chromium-98-WaylandFrameManager-check.patch
- Added patches:
  * chromium-97-arm-tflite-cast.patch
  * chromium-98-gtk4-build.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch
  * chromium-98-EnumTable-crash.patch
  * chromium-third_party-symbolize-missing-include.patch
  * chromium-v8-missing-utility-include.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
</package>
<package pkgid="4c953470ec4f41e61ba50993ba4e79f86e85ef0e9d94468bf09ebb2ee4f1a5c7" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="103.0.5060.114" rel="bp154.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
</package>
<package pkgid="f91d7f0d4ef3070e3a45a0da72bb94716af2dd7bd5bdd4608a5afea1e378f500" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="103.0.5060.114" rel="bp154.2.14.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647432000">- Chromium 99.0.4844.74 (boo#1197163)
  * CVE-2022-0971: Use after free in Blink Layout
  * CVE-2022-0972: Use after free in Extensions
  * CVE-2022-0973: Use after free in Safe Browsing
  * CVE-2022-0974: Use after free in Splitscreen
  * CVE-2022-0975: Use after free in ANGLE
  * CVE-2022-0976: Heap buffer overflow in GPU
  * CVE-2022-0977: Use after free in Browser UI
  * CVE-2022-0978: Use after free in ANGLE
  * CVE-2022-0979: Use after free in Safe Browsing
  * CVE-2022-0980: Use after free in New Tab Page
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
</package>
<package pkgid="8ef6848df5132b281103ddbcc6e33ee6f45fd4d5cd9848c7c74d62029e289676" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="103.0.5060.134" rel="bp154.2.17.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="b29049f69cb00efd388a779a375e26d547185e7df0822c1316d115596d851edf" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="103.0.5060.134" rel="bp154.2.17.2"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1647864000">- Chromium 99.0.4844.82:
  * Fix potential problem in Hangouts (boo#1197332)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648296000">- Chromium 99.0.4844.84:
  * CVE-2022-1096: Type Confusion in V8 (boo#1197552)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1648555200">- Update disk constraints</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1648641600">- Chromium 100.0.4896.60 (boo#1197680)
  * CVE-2022-1125: Use after free in Portals
  * CVE-2022-1127: Use after free in QR Code Generator
  * CVE-2022-1128: Inappropriate implementation in Web Share API
  * CVE-2022-1129: Inappropriate implementation in Full Screen Mode
  * CVE-2022-1130: Insufficient validation of untrusted input in WebOTP
  * CVE-2022-1131: Use after free in Cast UI
  * CVE-2022-1132: Inappropriate implementation in Virtual Keyboard
  * CVE-2022-1133: Use after free in WebRTC
  * CVE-2022-1134: Type Confusion in V8
  * CVE-2022-1135: Use after free in Shopping Cart
  * CVE-2022-1136: Use after free in Tab Strip
  * CVE-2022-1137: Inappropriate implementation in Extensions
  * CVE-2022-1138: Inappropriate implementation in Web Cursor
  * CVE-2022-1139: Inappropriate implementation in Background Fetch API
  * CVE-2022-1141: Use after free in File Manager
  * CVE-2022-1142: Heap buffer overflow in WebUI
  * CVE-2022-1143: Heap buffer overflow in WebUI
  * CVE-2022-1144: Use after free in WebUI
  * CVE-2022-1145: Use after free in Extensions
  * CVE-2022-1146: Inappropriate implementation in Resource Timing
- Added patches:
  * chromium-100-compiler.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-InMilliseconds-constexpr.patch
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-macro-typo.patch
- Removed patches:
  * chromium-98-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-glibc-2.34.patch
  * chromium-v8-missing-utility-include.patch
  * chromium-99-AutofillAssistantModelExecutor-NoDestructor.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="c6f3d39f927c38795fee91dbe2fc3d4cf74a9378abc4258809e44b8e0d5b3b40" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="104.0.5112.101" rel="bp154.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="1261009ab268c4039bdd9d52debee39bed6228c52646c82f946596df87dc777c" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="104.0.5112.101" rel="bp154.2.23.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649160000">- Chromium 100.0.4896.75:
  * CVE-2022-1232: Type Confusion in V8 (boo#1198053)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1649592000">- Patches for GCC 12:
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1649764800">- Chromium 100.0.4896.88 (boo#1198361)
  * CVE-2022-1305: Use after free in storage
  * CVE-2022-1306: Inappropriate implementation in compositing
  * CVE-2022-1307: Inappropriate implementation in full screen
  * CVE-2022-1308: Use after free in BFCache
  * CVE-2022-1309: Insufficient policy enforcement in developer tools
  * CVE-2022-1310: Use after free in regular expressions
  * CVE-2022-1311: Use after free in Chrome OS shell
  * CVE-2022-1312: Use after free in storage
  * CVE-2022-1313: Use after free in tab groups
  * CVE-2022-1314: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1650024000">- Chromium 100.0.4896.127 (boo#1198509)
  * CVE-2022-1364: Type Confusion in V8
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
</package>
<package pkgid="1cbff569b35d3b43d083082141ea6f562074227921a19f9532c9837cef7f6893" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="105.0.5195.127" rel="bp154.2.29.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="71a54cfa5d71e429d200ea493a0a81f376903461b3e3025300938678dab08ada" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="105.0.5195.127" rel="bp154.2.29.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650542400">- Fixes for go 1.18</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651665600">- Chromium 101.0.4951.54 (boo#1199118)
- Chromium 101.0.4951.41 (boo#1198917)
  * CVE-2022-1477: Use after free in Vulkan
  * CVE-2022-1478: Use after free in SwiftShader
  * CVE-2022-1479: Use after free in ANGLE
  * CVE-2022-1480: Use after free in Device API
  * CVE-2022-1481: Use after free in Sharing
  * CVE-2022-1482: Inappropriate implementation in WebGL
  * CVE-2022-1483: Heap buffer overflow in WebGPU
  * CVE-2022-1484: Heap buffer overflow in Web UI Settings
  * CVE-2022-1485: Use after free in File System API
  * CVE-2022-1486: Type Confusion in V8
  * CVE-2022-1487: Use after free in Ozone
  * CVE-2022-1488: Inappropriate implementation in Extensions API
  * CVE-2022-1489: Out of bounds memory access in UI Shelf
  * CVE-2022-1490: Use after free in Browser Switcher
  * CVE-2022-1491: Use after free in Bookmarks
  * CVE-2022-1492: Insufficient data validation in Blink Editing
  * CVE-2022-1493: Use after free in Dev Tools
  * CVE-2022-1494: Insufficient data validation in Trusted Types
  * CVE-2022-1495: Incorrect security UI in Downloads
  * CVE-2022-1496: Use after free in File Manager
  * CVE-2022-1497: Inappropriate implementation in Input
  * CVE-2022-1498: Inappropriate implementation in HTML Parser
  * CVE-2022-1499: Inappropriate implementation in WebAuthentication
  * CVE-2022-1500: Insufficient data validation in Dev Tools
  * CVE-2022-1501: Inappropriate implementation in iframe
- Added patches:
  * chromium-101-libxml-unbundle.patch
  * chromium-101-segmentation_platform-type.patch
- Removed patches:
  * chromium-100-SCTHashdanceMetadata-move.patch
  * chromium-100-GLImplementationParts-constexpr.patch
  * chromium-100-macro-typo.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652270400">- Chromium 101.0.4951.64 (boo#1199409)
  * CVE-2022-1633: Use after free in Sharesheet
  * CVE-2022-1634: Use after free in Browser UI
  * CVE-2022-1635: Use after free in Permission Prompts
  * CVE-2022-1636: Use after free in Performance APIs
  * CVE-2022-1637: Inappropriate implementation in Web Contents
  * CVE-2022-1638: Heap buffer overflow in V8 Internationalization
  * CVE-2022-1639: Use after free in ANGLE
  * CVE-2022-1640: Use after free in Sharing
  * CVE-2022-1641: Use after free in Web UI Diagnostics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1652616000">- Chromium 101.0.4951.67
  * fixes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1653652800">- Chromium 102.0.5001.61 (boo#1199893)
  * CVE-2022-1853: Use after free in Indexed DB
  * CVE-2022-1854: Use after free in ANGLE
  * CVE-2022-1855: Use after free in Messaging
  * CVE-2022-1856: Use after free in User Education
  * CVE-2022-1857: Insufficient policy enforcement in File System API
  * CVE-2022-1858: Out of bounds read in DevTools
  * CVE-2022-1859: Use after free in Performance Manager
  * CVE-2022-1860: Use after free in UI Foundations
  * CVE-2022-1861: Use after free in Sharing
  * CVE-2022-1862: Inappropriate implementation in Extensions
  * CVE-2022-1863: Use after free in Tab Groups
  * CVE-2022-1864: Use after free in WebApp Installs
  * CVE-2022-1865: Use after free in Bookmarks
  * CVE-2022-1866: Use after free in Tablet Mode
  * CVE-2022-1867: Insufficient validation of untrusted input in Data Transfer
  * CVE-2022-1868: Inappropriate implementation in Extensions API
  * CVE-2022-1869: Type Confusion in V8
  * CVE-2022-1870: Use after free in App Service
  * CVE-2022-1871: Insufficient policy enforcement in File System API
  * CVE-2022-1872: Insufficient policy enforcement in Extensions API
  * CVE-2022-1873: Insufficient policy enforcement in COOP
  * CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
  * CVE-2022-1875: Inappropriate implementation in PDF
  * CVE-2022-1876: Heap buffer overflow in DevTools
- Added patches:
  * chromium-102-compiler.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-regex_pattern-array.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * ffmpeg-new-channel-layout.patch
- Removed patches:
  * chromium-100-compiler.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-95-quiche-include.patch
  * chromium-fix-swiftshader-template.patch
  * chromium-missing-include-tuple.patch
  * chromium-webrtc-stats-missing-vector.patch
  * chromium-101-segmentation_platform-type.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
</package>
<package pkgid="f57fef1c80960036c65f34746ca7b27e6b5fcc7b61452597ea98b6ce3a661ce8" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="107.0.5304.110" rel="bp154.2.43.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
</package>
<package pkgid="2d09ba8f2e0646e8c3d22afdbfa830e6865235d811ff912a774cfb01e63ec20a" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="107.0.5304.110" rel="bp154.2.43.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
</package>
<package pkgid="5e6c2639add2dc692bb8e54d0c8036e310249e892d23265e54661c69afbb77c8" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="107.0.5304.121" rel="bp154.2.46.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
</package>
<package pkgid="8993d5da158e5e5d55d23e43cb22e7f48b8fcc7115d2c3eb4e7a4d2957105563" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="107.0.5304.121" rel="bp154.2.46.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
</package>
<package pkgid="77d24638dc25d479b9faa81a170693142b3a1217874f6d9b3fc16e9964f44e26" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="107.0.5304.87" rel="bp154.2.40.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
</package>
<package pkgid="e576022344394196d494b68c3d81c73aa558bfe7ed5dc8556e15419728fd0bc6" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="107.0.5304.87" rel="bp154.2.40.1"/>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654084800">- Disable ARM control flow integrity, it causes build issues
  at the moment
- Try a different SVG (black logo on GNOME)
- Removed patches:
  * chromium-third_party-symbolize-missing-include.patch
  (replaced by chromium-102-symbolize-include.patch)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1654689600">- Switch to GTK4 on TW and Leap 15.4+ (boo#1200139)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654862400">- Chromium 102.0.5005.115 (boo#1200423)
  * CVE-2022-2007: Use after free in WebGPU
  * CVE-2022-2008: Out of bounds memory access in WebGL
  * CVE-2022-2010: Out of bounds read in compositing
  * CVE-2022-2011: Use after free in ANGLE</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1656158400">- Chromium 103.0.5060.53 (boo#1200783)
  * CVE-2022-2156: Use after free in Base
  * CVE-2022-2157: Use after free in Interest groups
  * CVE-2022-2158: Type Confusion in V8
  * CVE-2022-2160: Insufficient policy enforcement in DevTools
  * CVE-2022-2161: Use after free in WebApp Provider
  * CVE-2022-2162: Insufficient policy enforcement in File System API
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * CVE-2022-2164: Inappropriate implementation in Extensions API
  * CVE-2022-2165: Insufficient data validation in URL formatting
- Added patches:
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-VirtualCursor-std-layout.patch
  * chromium-103-compiler.patch
- Removed patches:
  * chromium-102-compiler.patch
  * chromium-91-sql-standard-layout-type.patch
  * chromium-101-libxml-unbundle.patch
  * chromium-102-fenced_frame_utils-include.patch
  * chromium-102-swiftshader-template-instantiation.patch
  * chromium-102-symbolize-include.patch
  * chromium-97-arm-tflite-cast.patch
  * chromium-97-ScrollView-reference.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
</package>
<package pkgid="a33f75ba37b0870fe7baa6621825e2c282862558526f921f65acd14659dfd100" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="108.0.5359.71" rel="bp154.2.49.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
</package>
<package pkgid="501175bb48b872da5e48424267a26bf6ece23412e16220af898e9ff3f3d0ade9" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="108.0.5359.71" rel="bp154.2.49.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657195200">- Chromium 103.0.5060.66
  * no upstream release notes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
</package>
<package pkgid="d347b7b450636e68bb0f0f19f178f3b9eeee0bce2c9df8fff07c886b8ba1b054" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="108.0.5359.94" rel="bp154.2.52.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
</package>
<package pkgid="d4b24c43172a1d6895cfdc7e90108be422830efd520729900f631978ec882ce1" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="108.0.5359.94" rel="bp154.2.52.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1657368000">- Chromium 103.0.5060.114 (boo#1201216)
  * CVE-2022-2294: Heap buffer overflow in WebRTC
  * CVE-2022-2295: Type Confusion in V8
  * CVE-2022-2296: Use after free in Chrome OS Shell</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1658318400">- Chromium 103.0.5060.134 (boo#1201679):
  * CVE-2022-2477 : Use after free in Guest View
  * CVE-2022-2478 : Use after free in PDF
  * CVE-2022-2479 : Insufficient validation of untrusted input in File
  * CVE-2022-2480 : Use after free in Service Worker API
  * CVE-2022-2481: Use after free in Views
  * CVE-2022-2163: Use after free in Cast UI and Toolbar
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1658577600">- Switch back to Clang so that we can use BTI on aarch64
  * Gold is too old - doesn't understand BTI
  * LD crashes on aarch64
- Re-enable LTO
- Prepare move to FFmpeg 5 for new channel layout
  (requires 5.1+)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660046400">- Chromium 104.0.5112.79 (boo#1202075)
  * CVE-2022-2603: Use after free in Omnibox
  * CVE-2022-2604: Use after free in Safe Browsing
  * CVE-2022-2605: Out of bounds read in Dawn
  * CVE-2022-2606: Use after free in Managed devices API
  * CVE-2022-2607: Use after free in Tab Strip
  * CVE-2022-2608: Use after free in Overview Mode
  * CVE-2022-2609: Use after free in Nearby Share
  * CVE-2022-2610: Insufficient policy enforcement in Background Fetch
  * CVE-2022-2611: Inappropriate implementation in Fullscreen API
  * CVE-2022-2612: Side-channel information leakage in Keyboard input
  * CVE-2022-2613: Use after free in Input
  * CVE-2022-2614: Use after free in Sign-In Flow
  * CVE-2022-2615: Insufficient policy enforcement in Cookies
  * CVE-2022-2616: Inappropriate implementation in Extensions API
  * CVE-2022-2617: Use after free in Extensions API
  * CVE-2022-2618: Insufficient validation of untrusted input in Internals
  * CVE-2022-2619: Insufficient validation of untrusted input in Settings
  * CVE-2022-2620: Use after free in WebUI
  * CVE-2022-2621: Use after free in Extensions
  * CVE-2022-2622: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-2623: Use after free in Offline
  * CVE-2022-2624: Heap buffer overflow in PDF
- Added patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-104-tflite-system-zlib.patch
- Removed patches:
  * chromium-103-SubstringSetMatcher-packed.patch
  * chromium-103-FrameLoadRequest-type.patch
  * chromium-103-compiler.patch
- Use FFmpeg 5.1 on TW</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1660651200">- Re-enable our version of chrome-wrapper
- Set no sandbox if root is being used (https://crbug.com/638180)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660824000">- Chromium 104.0.5112.101 (boo#1202509):
  * CVE-2022-2852: Use after free in FedCM
  * CVE-2022-2854: Use after free in SwiftShader
  * CVE-2022-2855: Use after free in ANGLE
  * CVE-2022-2857: Use after free in Blink
  * CVE-2022-2858: Use after free in Sign-In Flow
  * CVE-2022-2853: Heap buffer overflow in Downloads
  * CVE-2022-2856: Insufficient validation of untrusted input in Intents
  * CVE-2022-2859: Use after free in Chrome OS Shell
  * CVE-2022-2860: Insufficient policy enforcement in Cookies
  * CVE-2022-2861: Inappropriate implementation in Extensions API</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1661169600">- Fix quoting in chrome-wrapper, don't put cwd on LD_LIBRARY_PATH</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1662033600">- Update chromium-symbolic.svg: this fixes bsc#1202403.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1662638400">- Chromium 105.0.5195.102 (boo#1203102):
  * CVE-2022-3075: Insufficient data validation in Mojo
- Chromium 105.0.5195.52 (boo#1202964):
  * CVE-2022-3038: Use after free in Network Service
  * CVE-2022-3039: Use after free in WebSQL
  * CVE-2022-3040: Use after free in Layout
  * CVE-2022-3041: Use after free in WebSQL
  * CVE-2022-3042: Use after free in PhoneHub
  * CVE-2022-3043: Heap buffer overflow in Screen Capture
  * CVE-2022-3044: Inappropriate implementation in Site Isolation
  * CVE-2022-3045: Insufficient validation of untrusted input in V8
  * CVE-2022-3046: Use after free in Browser Tag
  * CVE-2022-3071: Use after free in Tab Strip
  * CVE-2022-3047: Insufficient policy enforcement in Extensions API
  * CVE-2022-3048: Inappropriate implementation in Chrome OS lockscreen
  * CVE-2022-3049: Use after free in SplitScreen
  * CVE-2022-3050: Heap buffer overflow in WebUI
  * CVE-2022-3051: Heap buffer overflow in Exosphere
  * CVE-2022-3052: Heap buffer overflow in Window Manager
  * CVE-2022-3053: Inappropriate implementation in Pointer Lock
  * CVE-2022-3054: Insufficient policy enforcement in DevTools
  * CVE-2022-3055: Use after free in Passwords
  * CVE-2022-3056: Insufficient policy enforcement in Content Security Policy
  * CVE-2022-3057: Inappropriate implementation in iframe Sandbox
  * CVE-2022-3058: Use after free in Sign-In Flow
- Added patches:
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Bitmap-include.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-wayland-1.20.patch
  * chromium-105-compiler.patch
- Removed patches:
  * chromium-104-compiler.patch
  * chromium-104-ContentRendererClient-type.patch
  * chromium-78-protobuf-RepeatedPtrField-export.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663156800">- Chromium 105.0.5195.127 (boo#1203419):
  * CVE-2022-3195: Out of bounds write in Storage
  * CVE-2022-3196: Use after free in PDF
  * CVE-2022-3197: Use after free in PDF
  * CVE-2022-3198: Use after free in PDF
  * CVE-2022-3199: Use after free in Frames
  * CVE-2022-3200: Heap buffer overflow in Internals
  * CVE-2022-3201: Insufficient validation of untrusted input in DevTools
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1664625600">- Chromium 106.0.5249.91 (boo#1203808):
  * CVE-2022-3370: Use after free in Custom Elements
  * CVE-2022-3373: Out of bounds write in V8
- includes changes from 106.0.5249.61:
  * CVE-2022-3304: Use after free in CSS
  * CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools
  * CVE-2022-3305: Use after free in Survey
  * CVE-2022-3306: Use after free in Survey
  * CVE-2022-3307: Use after free in Media
  * CVE-2022-3308: Insufficient policy enforcement in Developer Tools
  * CVE-2022-3309: Use after free in Assistant
  * CVE-2022-3310: Insufficient policy enforcement in Custom Tabs
  * CVE-2022-3311: Use after free in Import
  * CVE-2022-3312: Insufficient validation of untrusted input in VPN
  * CVE-2022-3313: Incorrect security UI in Full Screen
  * CVE-2022-3314: Use after free in Logging
  * CVE-2022-3315: Type confusion in Blink
  * CVE-2022-3316: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2022-3317: Insufficient validation of untrusted input in Intents
  * CVE-2022-3318: Use after free in ChromeOS Notifications
- drop patches:
  * chromium-104-tflite-system-zlib.patch
  * chromium-105-AdjustMaskLayerGeometry-ceilf.patch
  * chromium-105-Trap-raw_ptr.patch
  * chromium-105-browser_finder-include.patch
  * chromium-105-raw_ptr-noexcept.patch
- add patches
  * chromium-106-ffmpeg-duration.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665057600">- Chromium 106.0.5249.103:
  * fix possible cache manager deadlock
  * Fix right-click menu appearing unexpectedly affecting screen
    readers</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1665576000">- Chromium 106.0.5249.119 (boo#1204223)
  * CVE-2022-3445: Use after free in Skia
  * CVE-2022-3446: Heap buffer overflow in WebSQL
  * CVE-2022-3447: Inappropriate implementation in Custom Tabs
  * CVE-2022-3448: Use after free in Permissions API
  * CVE-2022-3449: Use after free in Safe Browsing
  * CVE-2022-3450: Use after free in Peer Connection</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1666872000">- Chromium 107.0.5304.68 (boo#1204732)
  * CVE-2022-3652: Type Confusion in V8
  * CVE-2022-3653: Heap buffer overflow in Vulkan
  * CVE-2022-3654: Use after free in Layout
  * CVE-2022-3655: Heap buffer overflow in Media Galleries
  * CVE-2022-3656: Insufficient data validation in File System
  * CVE-2022-3657: Use after free in Extensions
  * CVE-2022-3658: Use after free in Feedback service on Chrome OS
  * CVE-2022-3659: Use after free in Accessibility
  * CVE-2022-3660: Inappropriate implementation in Full screen mode
  * CVE-2022-3661: Insufficient data validation in Extensions
- Added patches:
  * chromium-107-compiler.patch
  * chromium-107-system-zlib.patch
- Removed patches:
  * chromium-105-compiler.patch
  * chromium-105-Bitmap-include.patch
  * chromium-106-AutofillPopupControllerImpl-namespace.patch
- Unbundle libyuv and libavif on TW
- Prepare 15.5
- Use qt on 15.4+ (15.3 too old)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1666958400">- Chromium 107.0.5304.87 (boo#1204819)
  * CVE-2022-3723: Type Confusion in V8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1667995200">- Chromium 107.0.5304.110 (boo#1205221)
  * CVE-2022-3885: Use after free in V8
  * CVE-2022-3886: Use after free in Speech Recognition
  * CVE-2022-3887: Use after free in Web Workers
  * CVE-2022-3888: Use after free in WebCodecs
  * CVE-2022-3889: Type Confusion in V8
  * CVE-2022-3890: Heap buffer overflow in Crashpad</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668686400">- Build with llvm15 on openSUSE:Backports:SLE-15-SP5 and up</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669291200">- Chromium 107.0.5304.121 (boo#1205736)
  * CVE-2022-4135: Heap buffer overflow in GPU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1669809600">- Chromium 108.0.5359.71 (boo#1205871):
  * CVE-2022-4174: Type Confusion in V8
  * CVE-2022-4175: Use after free in Camera Capture
  * CVE-2022-4176: Out of bounds write in Lacros Graphics
  * CVE-2022-4177: Use after free in Extensions
  * CVE-2022-4178: Use after free in Mojo
  * CVE-2022-4179: Use after free in Audio
  * CVE-2022-4180: Use after free in Mojo
  * CVE-2022-4181: Use after free in Forms
  * CVE-2022-4182: Inappropriate implementation in Fenced Frames
  * CVE-2022-4183: Insufficient policy enforcement in Popup Blocker
  * CVE-2022-4184: Insufficient policy enforcement in Autofill
  * CVE-2022-4185: Inappropriate implementation in Navigation
  * CVE-2022-4186: Insufficient validation of untrusted input in Downloads
  * CVE-2022-4187: Insufficient policy enforcement in DevTools
  * CVE-2022-4188: Insufficient validation of untrusted input in CORS
  * CVE-2022-4189: Insufficient policy enforcement in DevTools
  * CVE-2022-4190: Insufficient data validation in Directory
  * CVE-2022-4191: Use after free in Sign-In
  * CVE-2022-4192: Use after free in Live Caption
  * CVE-2022-4193: Insufficient policy enforcement in File System API
  * CVE-2022-4194: Use after free in Accessibility
  * CVE-2022-4195: Insufficient policy enforcement in Safe Browsing
- drop chromium-105-wayland-1.20.patch, upstream
- drop chromium-107-compiler.patch
- add chromium-108-compiler.patch
- drop chromium-98-EnumTable-crash.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670068800">- Chromium 108.0.5359.94:
  * CVE-2022-4262: Type Confusion in V8 (boo#1205999)</changelog>
</package>
<package pkgid="051da1f1646afc13d7eb85a0f6611ba6ee677b2f6272ccedad1c5551569aa205" name="chromium-debuginfo" arch="aarch64">
  <version epoch="0" ver="112.0.5615.165" rel="bp154.2.84.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675857600">- Chromium 110.0.5481.77 (boo#1208029):
  * CVE-2023-0696: Type Confusion in V8
  * CVE-2023-0697: Inappropriate implementation in Full screen mode
  * CVE-2023-0698: Out of bounds read in WebRTC
  * CVE-2023-0699: Use after free in GPU
  * CVE-2023-0700: Inappropriate implementation in Download
  * CVE-2023-0701: Heap buffer overflow in WebUI
  * CVE-2023-0702: Type Confusion in Data Transfer
  * CVE-2023-0703: Type Confusion in DevTools
  * CVE-2023-0704: Insufficient policy enforcement in DevTools
  * CVE-2023-0705: Integer overflow in Core
  * Various fixes from internal audits, fuzzing and other initiatives
- build with bundled libavif
- dropped patches:
  * chromium-109-compiler.patch
  * chromium-icu72-3.patch
- added patches:
  * chromium-110-compiler.patch
  * chromium-110-system-libffi.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1676548800">- Chromium 110.0.5481.100
  * fix regression on SAP Business Objects web UI
  * fix date formatting behavior change from ICU 72</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677153600">- Chromium 110.0.5481.177 (boo#1208589)
  * CVE-2023-0927: Use after free in Web Payments API
  * CVE-2023-0928: Use after free in SwiftShader
  * CVE-2023-0929: Use after free in Vulkan
  * CVE-2023-0930: Heap buffer overflow in Video
  * CVE-2023-0931: Use after free in Video
  * CVE-2023-0932: Use after free in WebRTC
  * CVE-2023-0933: Integer overflow in PDF
  * CVE-2023-0941: Use after free in Prompts
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678363200">- Chromium 111.0.5563.64
  * New View Transitions API
  * CSS Color Level 4
  * New developer tools in style panel for color functionality
  * CSS added trigonometric functions, additional root font units
    and extended the n-th child pseudo selector.
  * previousslide and nextslide actions are now part of the Media
    Session API
  * A number of security fixes (boo#1209040)
  * CVE-2023-1213: Use after free in Swiftshader
  * CVE-2023-1214: Type Confusion in V8
  * CVE-2023-1215: Type Confusion in CSS
  * CVE-2023-1216: Use after free in DevTools
  * CVE-2023-1217: Stack buffer overflow in Crash reporting
  * CVE-2023-1218: Use after free in WebRTC
  * CVE-2023-1219: Heap buffer overflow in Metrics
  * CVE-2023-1220: Heap buffer overflow in UMA
  * CVE-2023-1221: Insufficient policy enforcement in Extensions API
  * CVE-2023-1222: Heap buffer overflow in Web Audio API
  * CVE-2023-1223: Insufficient policy enforcement in Autofill
  * CVE-2023-1224: Insufficient policy enforcement in Web Payments API
  * CVE-2023-1225: Insufficient policy enforcement in Navigation
  * CVE-2023-1226: Insufficient policy enforcement in Web Payments API
  * CVE-2023-1227: Use after free in Core
  * CVE-2023-1228: Insufficient policy enforcement in Intents
  * CVE-2023-1229: Inappropriate implementation in Permission prompts
  * CVE-2023-1230: Inappropriate implementation in WebApp Installs
  * CVE-2023-1231: Inappropriate implementation in Autofill
  * CVE-2023-1232: Insufficient policy enforcement in Resource Timing
  * CVE-2023-1233: Insufficient policy enforcement in Resource Timing
  * CVE-2023-1234: Inappropriate implementation in Intents
  * CVE-2023-1235: Type Confusion in DevTools
  * CVE-2023-1236: Inappropriate implementation in Internals
- drop patches:
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch
  * chromium-icu72-1.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363201">- Bump Leap's GCC to 12 as Chromium really likes newer standards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363202">- Revert back to GCC 11 on 15.4 as Clang 13 doesn't support GCC 12</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679313600">- Add gcc13-fix.patch in order to support GCC 13.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1679486400">- Chromium 111.0.5563.110 (boo#1209598)
  * CVE-2023-1528: Use after free in Passwords
  * CVE-2023-1529: Out of bounds memory access in WebHID
  * CVE-2023-1530: Use after free in PDF
  * CVE-2023-1531: Use after free in ANGLE
  * CVE-2023-1532: Out of bounds read in GPU Video
  * CVE-2023-1533: Use after free in WebProtect
  * CVE-2023-1534: Out of bounds read in ANGLE</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1679572800">- Update gcc13-fix.patch with few fixes required for aarch64,
  borrowed from Fedora's gcc13 patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1679918400">- Chromium 111.0.5563.147:
  * nth-child() validation performance regression for SAP apps</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1680609600">- Chromium 112.0.5615.49
  * CSS now supports nesting rules.
  * The algorithm to set the initial focus on &lt;dialog&gt; elements was updated.
  * No-op fetch() handlers on service workers are skipped from now on to make navigations faster
  * The setter for document.domain is now deprecated.
  * The recorder in devtools can now record with pierce selectors.
  * Security fixes (boo#1210126):
  * CVE-2023-1810: Heap buffer overflow in Visuals
  * CVE-2023-1811: Use after free in Frames
  * CVE-2023-1812: Out of bounds memory access in DOM Bindings
  * CVE-2023-1813: Inappropriate implementation in Extensions
  * CVE-2023-1814: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2023-1815: Use after free in Networking APIs
  * CVE-2023-1816: Incorrect security UI in Picture In Picture
  * CVE-2023-1817: Insufficient policy enforcement in Intents
  * CVE-2023-1818: Use after free in Vulkan
  * CVE-2023-1819: Out of bounds read in Accessibility
  * CVE-2023-1820: Heap buffer overflow in Browser History
  * CVE-2023-1821: Inappropriate implementation in WebShare
  * CVE-2023-1822: Incorrect security UI in Navigation
  * CVE-2023-1823: Inappropriate implementation in FedCM</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1680868800">- Revert a breaking change with chromium-112-feed_protos.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1681560000">- Chromium 112.0.5615.121:
  * CVE-2023-2033: Type Confusion in V8 (boo#1210478)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1681646400">- Fix Leap 15.4 build failures from default comparison operators
  defined outside of the class definition, a C++20 feature
  adding chromium-112-default-comparison-operators.patch</changelog>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1681905600">- Chromium 112.0.5615.165 (boo#1210618):
  * CVE-2023-2133: Out of bounds memory access in Service Worker API
  * CVE-2023-2134: Out of bounds memory access in Service Worker API
  * CVE-2023-2135: Use after free in DevTools
  * CVE-2023-2136: Integer overflow in Skia
  * CVE-2023-2137: Heap buffer overflow in sqlite
- drop chromium-112-feed_protos.patch</changelog>
</package>
<package pkgid="eb997e4a8864284ca19e01efc7131fd7b916ee65747f271c304a4a754d9dac99" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="112.0.5615.165" rel="bp154.2.84.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1671019200">- Chromium 108.0.5359.124 (boo#1206403):
  * CVE-2022-4436: Use after free in Blink Media
  * CVE-2022-4437: Use after free in Mojo IPC
  * CVE-2022-4438: Use after free in Blink Frames
  * CVE-2022-4439: Use after free in Aura
  * CVE-2022-4440: Use after free in Profiles</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1671364800">- Add chromium-disable-GlobalMediaControlsCastStartStop.patch:
  disable GlobalMediaControlsCastStartStop to fix crashes
  occurring when interacting with the Media UI (bsc#1198124)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1673352000">- Chromium 109.0.5414.74:
  * Add support for MathML Core
  * CSS: Auto range support for font descriptors inside @font-face
    rule
  * CSS: Add lh length unit
  * CSS: Add hyphenate-limit-chars property
  * CSS: Snap border, outline and column-rule widths before layout
  * API: Improved screen sharing and web conferencing: hints for
    suppressing local audio playback, and Conditional Focus
  * API: HTTP response status code in the Resource Timing API
  * API: Same-site cross-origin prerendering triggered by the
    speculation rules API
  * Remove Event.path API
  * CVE-2023-0128: Use after free in Overview Mode
  * CVE-2023-0129: Heap buffer overflow in Network Service
  * CVE-2023-0130: Inappropriate implementation in Fullscreen API
  * CVE-2023-0131: Inappropriate implementation in iframe Sandbox
  * CVE-2023-0132: Inappropriate implementation in Permission prompts
  * CVE-2023-0133: Inappropriate implementation in Permission prompts
  * CVE-2023-0134: Use after free in Cart
  * CVE-2023-0135: Use after free in Cart
  * CVE-2023-0136: Inappropriate implementation in Fullscreen API
  * CVE-2023-0137: Heap buffer overflow in Platform Apps
  * CVE-2023-0138: Heap buffer overflow in libphonenumber
  * CVE-2023-0139: Insufficient validation of untrusted input in Downloads
  * CVE-2023-0140: Inappropriate implementation in File System API
  * CVE-2023-0141: Insufficient policy enforcement in CORS
  * Various fixes from internal audits, fuzzing and other initiatives
- drop patches:
  * chromium-gcc11.patch - not needed
  * chromium-107-system-zlib.patch - upstream
  * chromium-108-compiler.patch
- add patches:
  * chromium-109-compiler.patch
  * chromium-109-clang-lp154.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1673956800">- Added patches:
  * chromium-icu72-1.patch: ensure TextCodecCJK doesn't conflict
    with system icu (bsc#1207147)
  * chromium-icu72-2.patch: align default characters for old icu
    with that of ICU 72
  * chromium-icu72-3.patch: make V8 aware of space in ICU 72 time
    format</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1674648000">- Chromium 109.0.5414.119 (boo#1207512):
  * CVE-2023-0471: Use after free in WebTransport
  * CVE-2023-0472: Use after free in WebRTC
  * CVE-2023-0473: Type Confusion in ServiceWorker API
  * CVE-2023-0474: Use after free in GuestView
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675857600">- Chromium 110.0.5481.77 (boo#1208029):
  * CVE-2023-0696: Type Confusion in V8
  * CVE-2023-0697: Inappropriate implementation in Full screen mode
  * CVE-2023-0698: Out of bounds read in WebRTC
  * CVE-2023-0699: Use after free in GPU
  * CVE-2023-0700: Inappropriate implementation in Download
  * CVE-2023-0701: Heap buffer overflow in WebUI
  * CVE-2023-0702: Type Confusion in Data Transfer
  * CVE-2023-0703: Type Confusion in DevTools
  * CVE-2023-0704: Insufficient policy enforcement in DevTools
  * CVE-2023-0705: Integer overflow in Core
  * Various fixes from internal audits, fuzzing and other initiatives
- build with bundled libavif
- dropped patches:
  * chromium-109-compiler.patch
  * chromium-icu72-3.patch
- added patches:
  * chromium-110-compiler.patch
  * chromium-110-system-libffi.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1676548800">- Chromium 110.0.5481.100
  * fix regression on SAP Business Objects web UI
  * fix date formatting behavior change from ICU 72</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1677153600">- Chromium 110.0.5481.177 (boo#1208589)
  * CVE-2023-0927: Use after free in Web Payments API
  * CVE-2023-0928: Use after free in SwiftShader
  * CVE-2023-0929: Use after free in Vulkan
  * CVE-2023-0930: Heap buffer overflow in Video
  * CVE-2023-0931: Use after free in Video
  * CVE-2023-0932: Use after free in WebRTC
  * CVE-2023-0933: Integer overflow in PDF
  * CVE-2023-0941: Use after free in Prompts
  * Various fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678363200">- Chromium 111.0.5563.64
  * New View Transitions API
  * CSS Color Level 4
  * New developer tools in style panel for color functionality
  * CSS added trigonometric functions, additional root font units
    and extended the n-th child pseudo selector.
  * previousslide and nextslide actions are now part of the Media
    Session API
  * A number of security fixes (boo#1209040)
  * CVE-2023-1213: Use after free in Swiftshader
  * CVE-2023-1214: Type Confusion in V8
  * CVE-2023-1215: Type Confusion in CSS
  * CVE-2023-1216: Use after free in DevTools
  * CVE-2023-1217: Stack buffer overflow in Crash reporting
  * CVE-2023-1218: Use after free in WebRTC
  * CVE-2023-1219: Heap buffer overflow in Metrics
  * CVE-2023-1220: Heap buffer overflow in UMA
  * CVE-2023-1221: Insufficient policy enforcement in Extensions API
  * CVE-2023-1222: Heap buffer overflow in Web Audio API
  * CVE-2023-1223: Insufficient policy enforcement in Autofill
  * CVE-2023-1224: Insufficient policy enforcement in Web Payments API
  * CVE-2023-1225: Insufficient policy enforcement in Navigation
  * CVE-2023-1226: Insufficient policy enforcement in Web Payments API
  * CVE-2023-1227: Use after free in Core
  * CVE-2023-1228: Insufficient policy enforcement in Intents
  * CVE-2023-1229: Inappropriate implementation in Permission prompts
  * CVE-2023-1230: Inappropriate implementation in WebApp Installs
  * CVE-2023-1231: Inappropriate implementation in Autofill
  * CVE-2023-1232: Insufficient policy enforcement in Resource Timing
  * CVE-2023-1233: Insufficient policy enforcement in Resource Timing
  * CVE-2023-1234: Inappropriate implementation in Intents
  * CVE-2023-1235: Type Confusion in DevTools
  * CVE-2023-1236: Inappropriate implementation in Internals
- drop patches:
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-93-InkDropHost-crash.patch
  * chromium-110-NativeThemeBase-fabs.patch
  * chromium-110-CredentialUIEntry-const.patch
  * chromium-110-DarkModeLABColorSpace-pow.patch
  * v8-move-the-Stack-object-from-ThreadLocalTop.patch
  * chromium-icu72-1.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363201">- Bump Leap's GCC to 12 as Chromium really likes newer standards</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363202">- Revert back to GCC 11 on 15.4 as Clang 13 doesn't support GCC 12</changelog>
  <changelog author="Martin Li&#x161;ka &lt;mliska@suse.cz&gt;" date="1679313600">- Add gcc13-fix.patch in order to support GCC 13.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1679486400">- Chromium 111.0.5563.110 (boo#1209598)
  * CVE-2023-1528: Use after free in Passwords
  * CVE-2023-1529: Out of bounds memory access in WebHID
  * CVE-2023-1530: Use after free in PDF
  * CVE-2023-1531: Use after free in ANGLE
  * CVE-2023-1532: Out of bounds read in GPU Video
  * CVE-2023-1533: Use after free in WebProtect
  * CVE-2023-1534: Out of bounds read in ANGLE</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1679572800">- Update gcc13-fix.patch with few fixes required for aarch64,
  borrowed from Fedora's gcc13 patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1679918400">- Chromium 111.0.5563.147:
  * nth-child() validation performance regression for SAP apps</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1680609600">- Chromium 112.0.5615.49
  * CSS now supports nesting rules.
  * The algorithm to set the initial focus on &lt;dialog&gt; elements was updated.
  * No-op fetch() handlers on service workers are skipped from now on to make navigations faster
  * The setter for document.domain is now deprecated.
  * The recorder in devtools can now record with pierce selectors.
  * Security fixes (boo#1210126):
  * CVE-2023-1810: Heap buffer overflow in Visuals
  * CVE-2023-1811: Use after free in Frames
  * CVE-2023-1812: Out of bounds memory access in DOM Bindings
  * CVE-2023-1813: Inappropriate implementation in Extensions
  * CVE-2023-1814: Insufficient validation of untrusted input in Safe Browsing
  * CVE-2023-1815: Use after free in Networking APIs
  * CVE-2023-1816: Incorrect security UI in Picture In Picture
  * CVE-2023-1817: Insufficient policy enforcement in Intents
  * CVE-2023-1818: Use after free in Vulkan
  * CVE-2023-1819: Out of bounds read in Accessibility
  * CVE-2023-1820: Heap buffer overflow in Browser History
  * CVE-2023-1821: Inappropriate implementation in WebShare
  * CVE-2023-1822: Incorrect security UI in Navigation
  * CVE-2023-1823: Inappropriate implementation in FedCM</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1680868800">- Revert a breaking change with chromium-112-feed_protos.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1681560000">- Chromium 112.0.5615.121:
  * CVE-2023-2033: Type Confusion in V8 (boo#1210478)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1681646400">- Fix Leap 15.4 build failures from default comparison operators
  defined outside of the class definition, a C++20 feature
  adding chromium-112-default-comparison-operators.patch</changelog>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1681905600">- Chromium 112.0.5615.165 (boo#1210618):
  * CVE-2023-2133: Out of bounds memory access in Service Worker API
  * CVE-2023-2134: Out of bounds memory access in Service Worker API
  * CVE-2023-2135: Use after free in DevTools
  * CVE-2023-2136: Integer overflow in Skia
  * CVE-2023-2137: Heap buffer overflow in sqlite
- drop chromium-112-feed_protos.patch</changelog>
</package>
<package pkgid="0a9de710f75bcecd18c68b46ae87fc5a805863c7cb0c178a6af26e7020d3a50d" name="csvprintf-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="bp154.2.3.1"/>
  <changelog author="archie.cobbs@gmail.com" date="1533124800">- Update to release 1.0.4
  - Fixed "unexpected character" bug when line ends with QUOTE, CR
  - Added "-X" flag to derive XML tag names from column headers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1614254400">- Update to release 1.1.0
  - Added support for format strings containing column names</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1635336000">- Run spec-cleaner on spec file</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582400">- Replace source tarball with _service file pulling from github</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582401">- Update to release 1.2.0
  + Added "-j" flag for JSON text sequence document output.
  + Stopped escaping double quote as "&amp;quot;" in plain XML text.</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637755200">- Update to release 1.2.1
  + Fixed bug where "-x" flag was behaving like "-X" flag</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639051200">- Update to release 1.3.0
  + Added "-b" flag for new Bash output mode</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639483200">- Update to release 1.3.1
  + Added "-c" flag for explicit column names
  + Added "-n" flag that only reads column names
  + Added "-p" flag for prefixing names
  + Omit special variable names in Bash mode
  + Fixed build error on systems without 'u_char' defined</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1674648000">- Update to release 1.3.2
  - Fixed bug where we could emit empty XML tag names
  - Fixed bug in man page examples for "-b" flag</changelog>
</package>
<package pkgid="2f95a271b39f1014231d80159aa1510f62be57dcf7220572b858f52e90aff3fa" name="csvprintf-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.2" rel="bp154.2.3.1"/>
  <changelog author="archie.cobbs@gmail.com" date="1533124800">- Update to release 1.0.4
  - Fixed "unexpected character" bug when line ends with QUOTE, CR
  - Added "-X" flag to derive XML tag names from column headers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1614254400">- Update to release 1.1.0
  - Added support for format strings containing column names</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1635336000">- Run spec-cleaner on spec file</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582400">- Replace source tarball with _service file pulling from github</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582401">- Update to release 1.2.0
  + Added "-j" flag for JSON text sequence document output.
  + Stopped escaping double quote as "&amp;quot;" in plain XML text.</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637755200">- Update to release 1.2.1
  + Fixed bug where "-x" flag was behaving like "-X" flag</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639051200">- Update to release 1.3.0
  + Added "-b" flag for new Bash output mode</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639483200">- Update to release 1.3.1
  + Added "-c" flag for explicit column names
  + Added "-n" flag that only reads column names
  + Added "-p" flag for prefixing names
  + Omit special variable names in Bash mode
  + Fixed build error on systems without 'u_char' defined</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1674648000">- Update to release 1.3.2
  - Fixed bug where we could emit empty XML tag names
  - Fixed bug in man page examples for "-b" flag</changelog>
</package>
<package pkgid="ab3ec03432bdfdc5333ee9749060794cb4b1e2cd95d2df20c64610a5b98978ee" name="csvprintf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.2" rel="bp154.2.3.1"/>
  <changelog author="archie.cobbs@gmail.com" date="1533124800">- Update to release 1.0.4
  - Fixed "unexpected character" bug when line ends with QUOTE, CR
  - Added "-X" flag to derive XML tag names from column headers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1614254400">- Update to release 1.1.0
  - Added support for format strings containing column names</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1635336000">- Run spec-cleaner on spec file</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582400">- Replace source tarball with _service file pulling from github</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582401">- Update to release 1.2.0
  + Added "-j" flag for JSON text sequence document output.
  + Stopped escaping double quote as "&amp;quot;" in plain XML text.</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637755200">- Update to release 1.2.1
  + Fixed bug where "-x" flag was behaving like "-X" flag</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639051200">- Update to release 1.3.0
  + Added "-b" flag for new Bash output mode</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639483200">- Update to release 1.3.1
  + Added "-c" flag for explicit column names
  + Added "-n" flag that only reads column names
  + Added "-p" flag for prefixing names
  + Omit special variable names in Bash mode
  + Fixed build error on systems without 'u_char' defined</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1674648000">- Update to release 1.3.2
  - Fixed bug where we could emit empty XML tag names
  - Fixed bug in man page examples for "-b" flag</changelog>
</package>
<package pkgid="8b615c3c211d7067c0674815fc118e16178170c3f7f9c74c2a1e9e391b91b7d6" name="csvprintf-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.2" rel="bp154.2.3.1"/>
  <changelog author="archie.cobbs@gmail.com" date="1533124800">- Update to release 1.0.4
  - Fixed "unexpected character" bug when line ends with QUOTE, CR
  - Added "-X" flag to derive XML tag names from column headers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1614254400">- Update to release 1.1.0
  - Added support for format strings containing column names</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1635336000">- Run spec-cleaner on spec file</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582400">- Replace source tarball with _service file pulling from github</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582401">- Update to release 1.2.0
  + Added "-j" flag for JSON text sequence document output.
  + Stopped escaping double quote as "&amp;quot;" in plain XML text.</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637755200">- Update to release 1.2.1
  + Fixed bug where "-x" flag was behaving like "-X" flag</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639051200">- Update to release 1.3.0
  + Added "-b" flag for new Bash output mode</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639483200">- Update to release 1.3.1
  + Added "-c" flag for explicit column names
  + Added "-n" flag that only reads column names
  + Added "-p" flag for prefixing names
  + Omit special variable names in Bash mode
  + Fixed build error on systems without 'u_char' defined</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1674648000">- Update to release 1.3.2
  - Fixed bug where we could emit empty XML tag names
  - Fixed bug in man page examples for "-b" flag</changelog>
</package>
<package pkgid="50f4bc407325115543c8091e1e9f290684c31fcbe835d66f7bf5cd2024ebb0d9" name="csvprintf-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="bp154.2.3.1"/>
  <changelog author="archie.cobbs@gmail.com" date="1533124800">- Update to release 1.0.4
  - Fixed "unexpected character" bug when line ends with QUOTE, CR
  - Added "-X" flag to derive XML tag names from column headers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1614254400">- Update to release 1.1.0
  - Added support for format strings containing column names</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1635336000">- Run spec-cleaner on spec file</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582400">- Replace source tarball with _service file pulling from github</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582401">- Update to release 1.2.0
  + Added "-j" flag for JSON text sequence document output.
  + Stopped escaping double quote as "&amp;quot;" in plain XML text.</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637755200">- Update to release 1.2.1
  + Fixed bug where "-x" flag was behaving like "-X" flag</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639051200">- Update to release 1.3.0
  + Added "-b" flag for new Bash output mode</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639483200">- Update to release 1.3.1
  + Added "-c" flag for explicit column names
  + Added "-n" flag that only reads column names
  + Added "-p" flag for prefixing names
  + Omit special variable names in Bash mode
  + Fixed build error on systems without 'u_char' defined</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1674648000">- Update to release 1.3.2
  - Fixed bug where we could emit empty XML tag names
  - Fixed bug in man page examples for "-b" flag</changelog>
</package>
<package pkgid="812d3cebfdcb1db58b5954c760dcab5183b02614920d4bb1e9b91d0536973485" name="csvprintf-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.2" rel="bp154.2.3.1"/>
  <changelog author="archie.cobbs@gmail.com" date="1533124800">- Update to release 1.0.4
  - Fixed "unexpected character" bug when line ends with QUOTE, CR
  - Added "-X" flag to derive XML tag names from column headers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1614254400">- Update to release 1.1.0
  - Added support for format strings containing column names</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1635336000">- Run spec-cleaner on spec file</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582400">- Replace source tarball with _service file pulling from github</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582401">- Update to release 1.2.0
  + Added "-j" flag for JSON text sequence document output.
  + Stopped escaping double quote as "&amp;quot;" in plain XML text.</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637755200">- Update to release 1.2.1
  + Fixed bug where "-x" flag was behaving like "-X" flag</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639051200">- Update to release 1.3.0
  + Added "-b" flag for new Bash output mode</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639483200">- Update to release 1.3.1
  + Added "-c" flag for explicit column names
  + Added "-n" flag that only reads column names
  + Added "-p" flag for prefixing names
  + Omit special variable names in Bash mode
  + Fixed build error on systems without 'u_char' defined</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1674648000">- Update to release 1.3.2
  - Fixed bug where we could emit empty XML tag names
  - Fixed bug in man page examples for "-b" flag</changelog>
</package>
<package pkgid="54775ed34fec1538f9910ac92545566f8ffb9f9a52e4fa6fcbfeca80fd227bd7" name="csvprintf-debugsource" arch="i586">
  <version epoch="0" ver="1.3.2" rel="bp154.2.3.1"/>
  <changelog author="archie.cobbs@gmail.com" date="1533124800">- Update to release 1.0.4
  - Fixed "unexpected character" bug when line ends with QUOTE, CR
  - Added "-X" flag to derive XML tag names from column headers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1614254400">- Update to release 1.1.0
  - Added support for format strings containing column names</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1635336000">- Run spec-cleaner on spec file</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582400">- Replace source tarball with _service file pulling from github</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582401">- Update to release 1.2.0
  + Added "-j" flag for JSON text sequence document output.
  + Stopped escaping double quote as "&amp;quot;" in plain XML text.</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637755200">- Update to release 1.2.1
  + Fixed bug where "-x" flag was behaving like "-X" flag</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639051200">- Update to release 1.3.0
  + Added "-b" flag for new Bash output mode</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639483200">- Update to release 1.3.1
  + Added "-c" flag for explicit column names
  + Added "-n" flag that only reads column names
  + Added "-p" flag for prefixing names
  + Omit special variable names in Bash mode
  + Fixed build error on systems without 'u_char' defined</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1674648000">- Update to release 1.3.2
  - Fixed bug where we could emit empty XML tag names
  - Fixed bug in man page examples for "-b" flag</changelog>
</package>
<package pkgid="912f722e235a63673cc610e23cf6e7df11956195d6d4c5cb8022b1dd4744737d" name="csvprintf-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.3.2" rel="bp154.2.3.1"/>
  <changelog author="archie.cobbs@gmail.com" date="1533124800">- Update to release 1.0.4
  - Fixed "unexpected character" bug when line ends with QUOTE, CR
  - Added "-X" flag to derive XML tag names from column headers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1614254400">- Update to release 1.1.0
  - Added support for format strings containing column names</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1635336000">- Run spec-cleaner on spec file</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582400">- Replace source tarball with _service file pulling from github</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582401">- Update to release 1.2.0
  + Added "-j" flag for JSON text sequence document output.
  + Stopped escaping double quote as "&amp;quot;" in plain XML text.</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637755200">- Update to release 1.2.1
  + Fixed bug where "-x" flag was behaving like "-X" flag</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639051200">- Update to release 1.3.0
  + Added "-b" flag for new Bash output mode</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639483200">- Update to release 1.3.1
  + Added "-c" flag for explicit column names
  + Added "-n" flag that only reads column names
  + Added "-p" flag for prefixing names
  + Omit special variable names in Bash mode
  + Fixed build error on systems without 'u_char' defined</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1674648000">- Update to release 1.3.2
  - Fixed bug where we could emit empty XML tag names
  - Fixed bug in man page examples for "-b" flag</changelog>
</package>
<package pkgid="f5c27039c94275bf62aeeaad8c9e550a1080f8c307864aef473c12fe19b3661a" name="csvprintf-debugsource" arch="s390x">
  <version epoch="0" ver="1.3.2" rel="bp154.2.3.1"/>
  <changelog author="archie.cobbs@gmail.com" date="1533124800">- Update to release 1.0.4
  - Fixed "unexpected character" bug when line ends with QUOTE, CR
  - Added "-X" flag to derive XML tag names from column headers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1614254400">- Update to release 1.1.0
  - Added support for format strings containing column names</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1635336000">- Run spec-cleaner on spec file</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582400">- Replace source tarball with _service file pulling from github</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582401">- Update to release 1.2.0
  + Added "-j" flag for JSON text sequence document output.
  + Stopped escaping double quote as "&amp;quot;" in plain XML text.</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637755200">- Update to release 1.2.1
  + Fixed bug where "-x" flag was behaving like "-X" flag</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639051200">- Update to release 1.3.0
  + Added "-b" flag for new Bash output mode</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639483200">- Update to release 1.3.1
  + Added "-c" flag for explicit column names
  + Added "-n" flag that only reads column names
  + Added "-p" flag for prefixing names
  + Omit special variable names in Bash mode
  + Fixed build error on systems without 'u_char' defined</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1674648000">- Update to release 1.3.2
  - Fixed bug where we could emit empty XML tag names
  - Fixed bug in man page examples for "-b" flag</changelog>
</package>
<package pkgid="2c5ad02c685d2661c491f771471b5ae17ff1cc39ab13b82e1a29c8f5301def4d" name="csvprintf-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="bp154.2.3.1"/>
  <changelog author="archie.cobbs@gmail.com" date="1533124800">- Update to release 1.0.4
  - Fixed "unexpected character" bug when line ends with QUOTE, CR
  - Added "-X" flag to derive XML tag names from column headers</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1614254400">- Update to release 1.1.0
  - Added support for format strings containing column names</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1635336000">- Run spec-cleaner on spec file</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582400">- Replace source tarball with _service file pulling from github</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637582401">- Update to release 1.2.0
  + Added "-j" flag for JSON text sequence document output.
  + Stopped escaping double quote as "&amp;quot;" in plain XML text.</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1637755200">- Update to release 1.2.1
  + Fixed bug where "-x" flag was behaving like "-X" flag</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639051200">- Update to release 1.3.0
  + Added "-b" flag for new Bash output mode</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1639483200">- Update to release 1.3.1
  + Added "-c" flag for explicit column names
  + Added "-n" flag that only reads column names
  + Added "-p" flag for prefixing names
  + Omit special variable names in Bash mode
  + Fixed build error on systems without 'u_char' defined</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1674648000">- Update to release 1.3.2
  - Fixed bug where we could emit empty XML tag names
  - Fixed bug in man page examples for "-b" flag</changelog>
</package>
<package pkgid="e6e1dbd8e5b9d15a7ac6b1518f5eb8efc3c35a32de403036b185d2f1c4c844e6" name="exim-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.94.2" rel="bp154.2.6.1"/>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for
  * CVE-2023-42114 (bsc#1215784)
  * CVE-2023-42115 (bsc#1215785)
  * CVE-2023-42116 (bsc#1215786)</changelog>
</package>
<package pkgid="50999c062708eeb19f5fa3c2d935c0da361ed0566dd0a512fccb2be5c504be88" name="exim-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.94.2" rel="bp154.2.6.1"/>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for
  * CVE-2023-42114 (bsc#1215784)
  * CVE-2023-42115 (bsc#1215785)
  * CVE-2023-42116 (bsc#1215786)</changelog>
</package>
<package pkgid="cec9ddf5d5bf867650a05c05d844b34f9dba333b75dae22b0c89f72913b30d35" name="exim-debuginfo" arch="s390x">
  <version epoch="0" ver="4.94.2" rel="bp154.2.6.1"/>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for
  * CVE-2023-42114 (bsc#1215784)
  * CVE-2023-42115 (bsc#1215785)
  * CVE-2023-42116 (bsc#1215786)</changelog>
</package>
<package pkgid="d117ad4665550b2ee576755efaaa3bbff182dc39cd85597afc04676a208d29f8" name="exim-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.94.2" rel="bp154.2.6.1"/>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for
  * CVE-2023-42114 (bsc#1215784)
  * CVE-2023-42115 (bsc#1215785)
  * CVE-2023-42116 (bsc#1215786)</changelog>
</package>
<package pkgid="21a0376933e8eb6f48fa20ab197a167126a32deb84a722b91b20f2b9bd749a79" name="exim-debugsource" arch="aarch64">
  <version epoch="0" ver="4.94.2" rel="bp154.2.6.1"/>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for
  * CVE-2023-42114 (bsc#1215784)
  * CVE-2023-42115 (bsc#1215785)
  * CVE-2023-42116 (bsc#1215786)</changelog>
</package>
<package pkgid="f71c5508a98852daec866ec4a3465aac2e44b6bfe92a8bc652219fbda46dfa9a" name="exim-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.94.2" rel="bp154.2.6.1"/>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for
  * CVE-2023-42114 (bsc#1215784)
  * CVE-2023-42115 (bsc#1215785)
  * CVE-2023-42116 (bsc#1215786)</changelog>
</package>
<package pkgid="077dacd0eea682432febdde4ef44e726b69ce3ec620f4bd59117e4e97d5e6ba1" name="exim-debugsource" arch="s390x">
  <version epoch="0" ver="4.94.2" rel="bp154.2.6.1"/>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for
  * CVE-2023-42114 (bsc#1215784)
  * CVE-2023-42115 (bsc#1215785)
  * CVE-2023-42116 (bsc#1215786)</changelog>
</package>
<package pkgid="87aadac0f4bab9fae08fc0f2289190404c0edcc68efca86093d9d1ed2bcb9919" name="exim-debugsource" arch="x86_64">
  <version epoch="0" ver="4.94.2" rel="bp154.2.6.1"/>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for
  * CVE-2023-42114 (bsc#1215784)
  * CVE-2023-42115 (bsc#1215785)
  * CVE-2023-42116 (bsc#1215786)</changelog>
</package>
<package pkgid="a95687f5dbea20c27d7fb7dacec939d5492f2605070f66af326ae776ed7a6108" name="eximon-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.94.2" rel="bp154.2.6.1"/>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for
  * CVE-2023-42114 (bsc#1215784)
  * CVE-2023-42115 (bsc#1215785)
  * CVE-2023-42116 (bsc#1215786)</changelog>
</package>
<package pkgid="4c6099ca59df839eee4cc3270eb147b8f4c84ccc931bde44efe62f646103b3db" name="eximon-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.94.2" rel="bp154.2.6.1"/>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for
  * CVE-2023-42114 (bsc#1215784)
  * CVE-2023-42115 (bsc#1215785)
  * CVE-2023-42116 (bsc#1215786)</changelog>
</package>
<package pkgid="8f938981ddfdd16ed908571c0fcfd2ffc5798736929b772700b6b5f7fdd9f408" name="eximon-debuginfo" arch="s390x">
  <version epoch="0" ver="4.94.2" rel="bp154.2.6.1"/>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for
  * CVE-2023-42114 (bsc#1215784)
  * CVE-2023-42115 (bsc#1215785)
  * CVE-2023-42116 (bsc#1215786)</changelog>
</package>
<package pkgid="9aaff015726ee8fcaee27720b0f475b095f01efd506232699ff31c484cd59427" name="eximon-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.94.2" rel="bp154.2.6.1"/>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1666094400">- add patch-cve-2022-3559 (fixes CVE-2022-3559, bsc#1204427, Bug 2915)</changelog>
  <changelog author="Peter Wullinger &lt;wullinger@rz.uni-kiel.de&gt;" date="1696248000">- add patch (patch-CVE-2023-42115-CVE-2023-42116-CVE-2023-42114.patch) for
  * CVE-2023-42114 (bsc#1215784)
  * CVE-2023-42115 (bsc#1215785)
  * CVE-2023-42116 (bsc#1215786)</changelog>
</package>
<package pkgid="4a7e4aefe32efda10772c161b382480bd383cac1c38bd27939a23a29d2e93de4" name="fwts-debuginfo" arch="aarch64">
  <version epoch="0" ver="22.05.00" rel="bp154.2.3.5"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
</package>
<package pkgid="603674947cdf1e396967c889d03575c05ccb16341c13e18472797a0367cc33e3" name="fwts-debuginfo" arch="i586">
  <version epoch="0" ver="22.05.00" rel="bp154.2.3.5"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
</package>
<package pkgid="15904997e050296bb90f09525b850b5c0ed159294e4b4d6a9aee8865880cb3cf" name="fwts-debuginfo" arch="x86_64">
  <version epoch="0" ver="22.05.00" rel="bp154.2.3.5"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
</package>
<package pkgid="1710e8849dee25cf48bc2d8652cf743ebbf5c3cf6951f88d11c5d2458fa9c3d5" name="fwts-debuginfo" arch="aarch64">
  <version epoch="0" ver="22.07.00" rel="bp154.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1659700800">- Update to version 22.07.00:
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
</package>
<package pkgid="e1cb87c2144218f61e5e4be741ea063c5643f758164ee0080c24ee7aa6a2fcf6" name="fwts-debuginfo" arch="i586">
  <version epoch="0" ver="22.07.00" rel="bp154.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1659700800">- Update to version 22.07.00:
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
</package>
<package pkgid="f2c431c0aa0656807955326534194a2945400ae7ed0b2cb2103db052c69a9e0b" name="fwts-debuginfo" arch="x86_64">
  <version epoch="0" ver="22.07.00" rel="bp154.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1659700800">- Update to version 22.07.00:
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
</package>
<package pkgid="c54345fcd602c94dcec6c79116948748c4c4c93a9951866fbfba945aceaeed16" name="fwts-debuginfo" arch="aarch64">
  <version epoch="0" ver="22.09.00" rel="bp154.2.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
</package>
<package pkgid="e747a0e0f5b2c3e8778296a230c1710831962e7c9af8d3e2fbe2595eb612aaa6" name="fwts-debuginfo" arch="i586">
  <version epoch="0" ver="22.09.00" rel="bp154.2.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
</package>
<package pkgid="375e62f6c61c063056fbd8376e3d5255d5824fa386e9d240edabb7bcbfe3ba2e" name="fwts-debuginfo" arch="x86_64">
  <version epoch="0" ver="22.09.00" rel="bp154.2.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
</package>
<package pkgid="2df12b50d562c172304b8225475199a7ab6d6a9a785d444dae7700f8852ab823" name="fwts-debugsource" arch="aarch64">
  <version epoch="0" ver="22.05.00" rel="bp154.2.3.5"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
</package>
<package pkgid="4536ab521045f2934ffb76e64549ba314a659d0702a83f72b6c3910c117d9f09" name="fwts-debugsource" arch="i586">
  <version epoch="0" ver="22.05.00" rel="bp154.2.3.5"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
</package>
<package pkgid="4f0e820b06eac73ed901d897aa1d4dae0be3652963563304ad201ca813b878f4" name="fwts-debugsource" arch="x86_64">
  <version epoch="0" ver="22.05.00" rel="bp154.2.3.5"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
</package>
<package pkgid="d8a0c56f1bb3686981ebcf440d909444c3752801c5be250f05f730c4359e227f" name="fwts-debugsource" arch="aarch64">
  <version epoch="0" ver="22.07.00" rel="bp154.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1659700800">- Update to version 22.07.00:
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
</package>
<package pkgid="e6dcf2bdb220ad6dbf461e6c85158ed9b88c220ad3dccde0a4ed333e47693300" name="fwts-debugsource" arch="i586">
  <version epoch="0" ver="22.07.00" rel="bp154.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1659700800">- Update to version 22.07.00:
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
</package>
<package pkgid="070d83b1c475fed17fdaddad091f85f14ef1032e0e6a199ae91117ac15ecb9be" name="fwts-debugsource" arch="x86_64">
  <version epoch="0" ver="22.07.00" rel="bp154.2.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1659700800">- Update to version 22.07.00:
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
</package>
<package pkgid="ab9dc1964823532922414d61a68eced8ee63c4688a0396cda3537b527213365d" name="fwts-debugsource" arch="aarch64">
  <version epoch="0" ver="22.09.00" rel="bp154.2.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
</package>
<package pkgid="645eb1a57f6a4fb592db0c185146c4ad33ee3c99b896acf62f172365d929b3c2" name="fwts-debugsource" arch="i586">
  <version epoch="0" ver="22.09.00" rel="bp154.2.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
</package>
<package pkgid="ae6e530e92fc5ecb32dd5bd05eb10ac6ab70294484b441ea8fbf243358380e0d" name="fwts-debugsource" arch="x86_64">
  <version epoch="0" ver="22.09.00" rel="bp154.2.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1619611200">- Switch to obs scm _service</changelog>
  <changelog author="Martin Pluskal mpluskal@suse.com" date="1621512000">- Update to version 21.03.00:
  * uefirtvariable: fix memory leak
  * acpi: refactor by fwts_acpi_reserved_type_check
  * acpi: refactor by fwts_acpi_structure_range_check
  * uefirtauthvar: check variable runtime services supported before testing (LP: #1913351)
  * uefirtvariable: check variable runtime services supported before testing (LP: #1913351)
  * uefirtmisc: check misc runtime services supported before testing (LP: #1913351)
  * uefirttime: check time services supported before testing (LP: #1913351)
  * acpi: spcr: accept baud rate 0x0 as a preconfigured state
  * fwts-test: sync up with PMTT rev 2 changes
  * acpi: pmtt: update PMTT to revision 2 (mantis 1975)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1621857600">- Update to version 21.05.00:
  * lib: fwts_version.h - update to V21.05.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add impish
  * fwts-test: sync up with dbgp changes
  * acpi: dbgp/spmi: check space ids by fwts_acpi_space_id
  * acpiinfo: update ACPI 6.4 vs. ACPICA versions
  * lib: acpi: fix incorrect actual vs. struct length outputs
  * acpi: shorten helper function names by removing "check"
  * lib: acpi: unify naming style by removing "ACPI"
  * fwts-test: sync up with PMTT refactoring changes
  * acpi: refactor length check by fwts_acpi_structure_length_check
  * acpi: refactor zero length by fwts_acpi_structure_length_zero_check</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1624363200">- Update to version 21.06.00:
  * lib: fwts_version.h - update to V21.06.00
  * debian: update changelog
  * fwts_acpi_tables: memcpy 4 char ACPI table name
  * Remove complex disabling of ACPI for non-ACPI targets
  * Debian: move source lintian overrides file to source
  * Add lintian overrides for ldconfig trigger warning
  * Debian: control: update Standards-Version to 4.1.0
  * Debian: update compat level to 9
  * Debian: add Rules-Requires-Root field to control file
  * Debian: add project Homepage field to control file
  * debian/copyright: use secure https url specifier
  * Debian: remove spaces at end of lines of control file
  * Debian: remove spaces at end of lines of changelong
  * auto-packager: mkpackage.sh: remove xenial
  * live-image: add "TPM tests" to root menu
  * live-image: add utils tests to "Selected" menu
  * tpmevlog: add to batch tests
  * klog.json: check IRQ requests on irqchip</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1628078400">- Update to version 21.07.00:
  * ACPICA: Update to version 20210730
  * uefirttime: Fix incorrect error messages for invalid time test
  * fwts-test: sync up with updates in fwts_wmi_known_guids
  * acpi/wmi: update WMI known GUIDs from Linux kernel 5.14-rc1
  * sbbr: remove pm_file test (not required in BBR 1.0)
  * lib: fwts_version.h - update to V21.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove groovy
  * uefirttime: add advice for the timezone 2047 failure (LP: #1933503)
  * fwts-test: sync up with DBG2 changes from BSA updates
  * fwts_acpi_tables: skip FACS warning for reduced hardware
  * acpi: method: Make _AEI test optional for SBBR
  * acpi: dbg2: Allow 16550 compatible serial port in DBG2
  * acpi: method: Make method_test_ADR() optional
  * sbbr: adjust signature name for MADT
  * sbbr: remove SSDT from mandatory list
  * sbbr: acpitables: add new recommended tables
  * acpi: acpitables: add advices for table revision tests</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1629892800">- Update to version 21.08.00:
  * lib: fwts_version.h - update to V21.08.00
  * debian: update changelog
  * ARM64 SMCCC firmware API tests
  * bios: smm: fix indentation
  * acpi: sbbr: refactor by fwts_get_fadt_version
  * lib: fwts_acpi_tables: add a function to get FADT versions
  * acpi: fadt: remove hard-coded FADT version
  * acpi: fadt: clarify comments of FACS and HW-reduced mode
  * acpi: dmar: add a warning when PCI device is not found</changelog>
  <changelog author="mpluskal@suse.com" date="1631620800">- Update to version 21.08.00:
  * Manual: update number of tests, date and remove double spaces
  * debian/control: Add device-tree-compiler as dependency for armel/armhf/arm64
  * fwts_firmware: Rework Devicetree firmware detection
  * Enable dt_sysinfo test for Power only</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1632916800">- Update to version 21.09.00:
  * snapcraft: Fix incorrect core20 library path
  * snapcraft: fix path to fwts
  * lib: fwts_version.h - update to V21.09.00
  * debian: update changelog
  * acpi: replace fwts_firmware_detect() by fw-&gt;firmware_type
  * lib: fwts_firmware: fix incorrect comments for fwts_firmware_detect
  * uefi: uefirtmisc: reduce scope of some variables
  * uefi: securebootcert: make some function arguments const
  * src/pci/smccc: reduce scope of variable ret
  * bios: smm: remove redundant variable n
  * acpi: iort: constify some function arguments
  * acpi: dmar: constify a pointer argument in acpi_parse_dev_scope
  * acpi: cstates: remove redundant null check on entry
  * smccc_test: fix missing ) in pr_info call
  * opal: clean up some coding style issues
  * opal: Fix a few memory leaks on asprint allocated buffers
  * acpi: s3power: clean up pedantic static analysis warnings
  * uefirtvariable: clean up pedantic static analysis warnings
  * opal: mem_info: clean up pedantic static analysis warnings
  * fwts_devicetree: clean up static analysis warning
  * fwts_acpi_tables: NULLify table pointers
  * snapcraft: update to use core20
  * lib: use &lt;poll.h&gt; rather than &lt;sys/poll.h&gt;</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1638532800">- Update to version 21.11.00:
  * lib: fwts_version.h - update to V21.11.00
  * debian: update changelog
  * auto-packager:mkpackage.sh: add jammy
  * fwts-test: sync up the adding sleep type for s2idle testing
  * s3: add sleep type setting for testing with s3 or s2idle
  * acpi: madt: De-initialise ACPICA core engine in case of error.
  * lib: fwts_smbios: fix loading SMBIOS table from uefi
  * acpi: uniqueid: skip comparison of _HID and _CID of the same device
  * ACPICA: Update to version 20210930</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1640088000">- Update to version 21.12.00:
  * lib: fwts_version.h - update to V21.12.00
  * debian: update changelog
  * dmicheck: skip scanning smbios in /dev/mem on aarch64
  * s3: increase s2idle_residency to u64 to avoid overflows
  * s3: fix incorrect error messages for s2idle_residency
  * acpi: uniqueid: clean up pedantic static analysis warnings
  * s4: clean up pedantic static analysis warnings</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1642593600">- Update build dependencies (add zlib)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1644321600">- Update to version 22.01.00:
  * fwts-test: sync up the adding option for get next high monotonic count
  * uefirtmisc: add option to specify iterations get next high monitonic count
  * uefirtmisc: add checking the resources for testing
  * lib: fwts_version.h - update to V22.01.00
  * debian: update changelog
  * fwts_acpica: skip unneccessary null check
  * s3: use system suspend default if --s3-sleep-type is not used
  * tpmevlogdump: add supporting several new types for event log dumping
  * auto-packager: mkpackage.sh: remove hirsute
  * tpmevlog: add supporting several new types for event log checking
  * lib: fwts_tpm.h: add new type definition</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1648123200">- Update to version 22.03.00:
  * lib: fwts_version.h - update to V22.03.00
  * debian: update changelog
  * fwts-test: sync up the sdev checking secure access components
  * acpi: sdev: add checking secure access components
  * acpi: macf: report failures instead of just logging the errors
  * acpi/time: skip a number of TAD methods when _GCP[0] is clear
  * acpi:dmar: update the link of DMAR table
  * fwts-tests: update acpi dump data to be in sync with latest ACPICA
  * ACPICA: Update to version 20211217</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1653998400">- Update to version 22.05.00:
  * lib: fwts_version.h - update to V22.05.00
  * debian: update changelog
  * fwts-test: sync up IORT test with specification version E.d
  * acpi: mcfg: checking kernel lockdown when doing mmap PCI config space
  * auto-packager:mkpackage.sh: add kinetic
  * acpi: iort: update IORT test to specification version E.d
  * Update copyright year to 2022
  * acpi: iort: update the IORT node dump
  * acpi: iort: update IORT node revision check
  * ACPICA: Update to version 20220331</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- Update to version 22.07.00:
  * acpi: fadt: get _CST c2 c3 for p_lvl2 and p_lvl3 tests
  * uefi: securebootcert: fix the attribute set for AuditMode and DeployedMode
  * lib: acpi: update battery charge limiting state for _BST
  * acpi: dbg2: update the subtype for DBG2 table
  * lib: fwts_version.h - update to V22.07.00
  * debian: update changelog
  * auto-packager: mkpackage.sh: remove impish
  * fwts-test: sync up with asf verbose dump
  * acpi: asf: enable verbose output
  * fwts-test: sync up the remove of ASF minimun watchdog reset value
  * acpi: asf: remove the checking of minmun watchdog reset value 0
  * fwts-test: sync up the fix of pmtt wrong table label
  * acpi: pmtt: fix the wrong table label
  * dmicheck: update the processor upgrade field for type 4
  * dmicheck: update for supporting DMI version to 3.5
  * dmicheck: add Processor Architecture Types check for type 44
  * build: Improve linking</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1665662400">- Update to version 22.09.00:
  * lib: fwts_version.h - update to V22.09.00
  * debian: update changelog
  * acpi: iort: remove redundant code
  * fwts-test: add regression test for SVKL
  * acpi: svkl: add test for SVKL table (mantis 2162)
  * acpi: nhltdump: add endpoint discriptor string description
  * acpi: nhltdump: add dumping nhlt table for audio configurations</changelog>
</package>
<package pkgid="4fb4a5885fb1c9e97c543234b74a236d3b4173cf5648ac157cc7c2292f7ea5c7" name="gdcm-applications-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="29dbf88809337b5c23bcb2b8033023152e007c5ea2c6d937ffea9cac9bad5a4d" name="gdcm-applications-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="229f8f739521ff68e75ce937789fcea181e480bfe344bd7cd21e1f460e1d81ad" name="gdcm-applications-debuginfo" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="8a3efbb8685961b25ed87804745e3b5aa6466ed071fd19293b2dee5f53fedacc" name="gdcm-applications-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="10ae319ff7aae51cdd4ff219d5ff1acd07b20d9233b4d90fe28548ac4bc404de" name="gdcm-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="93966a16e69107ce5dcc76da8d29137adcb12da67fcdecfd7a65e4259ae2817a" name="gdcm-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="6701c820bc1b19217c96c6cc049ca4bc4386d6c8a617260379f1093a61a43e68" name="gdcm-debuginfo" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="7d807b82a87096ea3dabaa0bc6fd30740671244bade3f7698842350e76004ea8" name="gdcm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="6a6eccbc4255d1c106e6fe6948cf6b8150bd62405a9aecaa0ae850c69c3fd609" name="gdcm-debugsource" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="e4030a9584d87d0de23fa1e1273e3771d4a9f973813d78686d04813f6637488f" name="gdcm-debugsource" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="b621fdb5513096abba2070decd71fcd9bc9ff97821cb8be496ef798a5257fcb0" name="gdcm-debugsource" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="8559a209986b0b936c458b2d383ca1e003ab97305a32c6735283d095e2ec8adb" name="gdcm-debugsource" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="fe4214c6634c43005efe09d58d4cba692203b066b99719572399e5d47b500249" name="gmenudbusmenuproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="d5347c1c5e4186aca4bc3bebdf866eb1404d6ec09f449f5cdb9661a94554cc44" name="gmenudbusmenuproxy-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="18f2daa5d44f4ad44121d3f8bc7c6ce122072b4076ee9c2791678607b3d5a5a1" name="gmenudbusmenuproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="6e8ee22868d512c3ab277c376ba90d2612580f28b5a64f9141e1bef0883d399b" name="gn-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.20231023" rel="bp154.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
</package>
<package pkgid="db6e467c2abfd302ca93c68a24d88ecab813af0d7c40f24dac1602572dc8cffa" name="gn-debuginfo" arch="i586">
  <version epoch="0" ver="0.20231023" rel="bp154.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
</package>
<package pkgid="fcd8e4fbf86a4816ebfdacadbcc446f3d833ff2985f1cebcdca34649064f970b" name="gn-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.20231023" rel="bp154.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
</package>
<package pkgid="100bdded819e9188966f87b70288ba98941367cbe7d57b344e62053ea2b58374" name="gn-debuginfo" arch="s390x">
  <version epoch="0" ver="0.20231023" rel="bp154.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
</package>
<package pkgid="37c5dc2e775c0dd5bdaff763651869f88b0a754978af07cb00d18a8910f13e7e" name="gn-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.20231023" rel="bp154.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
</package>
<package pkgid="5e1138efeb9f981dc661fafd09b9ad930d32db1af417c3246ef51cef90a3f005" name="gn-debugsource" arch="aarch64">
  <version epoch="0" ver="0.20231023" rel="bp154.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
</package>
<package pkgid="6761d31075069bee8354b53fd9f7de6e70c13ca6bf1ad37d0e5023caf2d22830" name="gn-debugsource" arch="i586">
  <version epoch="0" ver="0.20231023" rel="bp154.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
</package>
<package pkgid="ff077cc9136dd60e9594afa0feb467c88295fcf04ce33db6d6294ba8e676361f" name="gn-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.20231023" rel="bp154.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
</package>
<package pkgid="7c5c6648af9ee987f3fe8c76f2a62cacca321095cc0eebeaff7838deba628616" name="gn-debugsource" arch="s390x">
  <version epoch="0" ver="0.20231023" rel="bp154.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
</package>
<package pkgid="1ea3577bf90fd6764a04aad659e54f6fa69e45f1c02a11bb5e424480971d629a" name="gn-debugsource" arch="x86_64">
  <version epoch="0" ver="0.20231023" rel="bp154.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604145600">- Add riscv.patch to add support for RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to version 0.20210811:
  * C++ modernization improvements.
  * Minor style updates.
  * Enable GN to build &amp; run on z/OS
  * Fix a typo in the doc of "generated_file"
  * Update doc/help to say --ninja-executable works for VS Flags
  * [rust] Fix and test dylib support
  * Add 'rustenv' to 'gn desc' output
  * [rust] Clean up logic in PullDependentTargetLibsFrom
  * Link Rust binaries against transitive public_deps
  * Fix linking dynamic libraries in Rust binaries
- Remove patches:
  * gn-flags.patch
  * gn-always-python3.patch
  * riscv.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1631275200">- Fix build with riscv64</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Add deprecated_copy.patch: fix deprecated copy GCC warnings
- Go back to GCC
- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Bump Leap's GCC version to 12 to align with the other Chromium
  tools
- Exclude ppc - it doesn't build</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1699617600">- Update to version 0.20231023:
  * many updates to support Chromium 119 build
- drop deprecated_copy.patch
- add redundant-move.patch</changelog>
</package>
<package pkgid="6ecea70759ca66b5b18eec89b2ec3e59c5fa3e31d67534db21fb0052aeed746d" name="gzdoom-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.10.0" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600171200">- Drop Recommends for music backends
  (this has moved to zmusic.spec)
- Demote Recommends to Suggests</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614859200">- Add 0001-fixed-zipdir-inability-to-update-empty-zip-file.patch
- Update to release 4.5.0
  * For all of Doom's fullscreen images, there's now widescreen
    versions provided.
  * A simplified options menu is now available for quick setup of
    the important settings.
  * New keybindings presets. Users can now choose between the
    classic layout and a WASD-based one.
  * Menu and intermission screen now scale to the original
    Doom.exe's layout by default.
  * Major additions to the menu system - animated menu
    transitions, image slideshows and fixed size menus can now be
    created.
  * The console now uses the border flat as default background
    instead of the titlepic.
  * It is now possible to fully quit the fullscreen console and
    get back to the title loop.
  * Interpolate positions and angles in the automap for smoother
    appearance.
  * Added $PitchSet for SNDINFO.
  * Allow indirections in the string table by prefixing the
    language string with '$$' the remaining text is interpreted
    as another string label to resolve.
  * Optimization of the patch texture checker - do not read in
    the entire file if checking the initial header is sufficient
    for rejecting it. This can speed up loading of large mods
    quite significantly.
  * OPUS support (via libsndfile)
- Drop gzdoom-spirv.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621684800">- Update to release 4.6
  * Widescreen graphics for Heretic and Hexen
  * Sprite shadows like in the Build engine. Both in software and
    hardware renderer.
  * 16 bit channel PNG files can be read.
  * DEHEXTRA working properly now.
  * Various enhancements and fixes for ZScript.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1627473600">- Update to release 4.6.1
  * Bug fixes, and widepix updates</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632312000">- Update to release 4.7.0
  * GLES2 backend
  * Widescreen graphics for Strife
  * MBF21 support (beta)
  * DEHEXTRA works properly now
  * Various enhancements and fixes for ZScript
- Add 0001-gles-look-for-libGLESv2.so.2.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634731200">- Update to release 4.7.1
  * Allow map markers to scale relative to automap zoom.
  * Add cvars to control automap line alpha and thickness.
  * Resolved a VM abort upon morphing while the tome of power is
    active.
- Remove 0001-gles-look-for-libGLESv2.so.2.patch (merged)</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1650024000">- Drop unused nasm from buildrequires.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650715200">- Reenable use of system vulkan libraries on Tumbleweed.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1654516800">- Update to release 4.8.0
  * Added Raze-style HUD scaling. Not exposed in the menu yet,
    Set hud_oldscale to 0 and use shift with the screen resize
    keys to scale the status bar.
  * Handle the start/endoom screens with the ingame renderer.
    They are now present on all platforms and use the full screen
    size of the game.
  * Many MBF21 fixes.
  * Added the cutscene system from Raze.
- Add gzdoom-discord.patch
- Add 0001-Resolve-build-failure-on-i686-linux.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655985600">- Add 0001-Revert-load-the-hex-font-as-early-as-possible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1656244800">- Update to release 4.8.1
  * Bugfix for software mode mirrors not working
  * Feature: Add +ONLYVISIBLEINMIRRORS and +INVISIBLEINMIRRORS
    actor flags. The former makes the actor only visible in
    reflections, while the latter makes the actor not cast
    reflections in mirrors.
- Drop 0001-Resolve-build-failure-on-i686-linux.patch (merged)
- Add 0001-Revert-use-static_assert-to-make-32-bit-builds-fail.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657022400">- Update to release 4.8.2
  * add a few maps to the rebuildnodes compatibility block</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657454400">- Disable rpath</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658664000">- Replace 0001-Revert-load-the-hex-font-as-early-as-possible.patch
  by better fix, 0001-fix-gzdoom.pk3-not-found-error.patch .
- Drop gzdoom-asmjit.patch (no longer needed; the linkage error
  it used to fix seems just gone)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1666612800">- Update gzdoom-vulkan.patch for glslang-11.12.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667649600">- Update to release 4.9.0
  * IQM bone model support
  * Textured particles
  * The SoftPoly renderer was removed
- Delete gzdoom-sdlbug.patch (obsolete),
  0001-fix-gzdoom.pk3-not-found-error.patch (merged)
- Add 0001-build-unbreak-compilation-on-Linux.patch,
  0001-removed-some-32bit-only-CMake-code.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667736000">- Update description for the removal of SoftPoly</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1670155200">- Update to release 4.10.0
  * Map&lt;K,V&gt; and MapIterator&lt;K,V&gt; for ZScript
  * Quaternion support for model rotations
  * Improved IQM support
- Delete 0001-build-unbreak-compilation-on-Linux.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675771200">- Update gzdoom-vulkan.patch for glslang 12</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1680177600">- Add gcc13.diff</changelog>
</package>
<package pkgid="6367fe93934f366bfbb6682f3b927ec18c5e7bcfedefe942b80a246e624d69b2" name="gzdoom-debuginfo" arch="s390x">
  <version epoch="0" ver="4.10.0" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600171200">- Drop Recommends for music backends
  (this has moved to zmusic.spec)
- Demote Recommends to Suggests</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614859200">- Add 0001-fixed-zipdir-inability-to-update-empty-zip-file.patch
- Update to release 4.5.0
  * For all of Doom's fullscreen images, there's now widescreen
    versions provided.
  * A simplified options menu is now available for quick setup of
    the important settings.
  * New keybindings presets. Users can now choose between the
    classic layout and a WASD-based one.
  * Menu and intermission screen now scale to the original
    Doom.exe's layout by default.
  * Major additions to the menu system - animated menu
    transitions, image slideshows and fixed size menus can now be
    created.
  * The console now uses the border flat as default background
    instead of the titlepic.
  * It is now possible to fully quit the fullscreen console and
    get back to the title loop.
  * Interpolate positions and angles in the automap for smoother
    appearance.
  * Added $PitchSet for SNDINFO.
  * Allow indirections in the string table by prefixing the
    language string with '$$' the remaining text is interpreted
    as another string label to resolve.
  * Optimization of the patch texture checker - do not read in
    the entire file if checking the initial header is sufficient
    for rejecting it. This can speed up loading of large mods
    quite significantly.
  * OPUS support (via libsndfile)
- Drop gzdoom-spirv.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621684800">- Update to release 4.6
  * Widescreen graphics for Heretic and Hexen
  * Sprite shadows like in the Build engine. Both in software and
    hardware renderer.
  * 16 bit channel PNG files can be read.
  * DEHEXTRA working properly now.
  * Various enhancements and fixes for ZScript.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1627473600">- Update to release 4.6.1
  * Bug fixes, and widepix updates</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632312000">- Update to release 4.7.0
  * GLES2 backend
  * Widescreen graphics for Strife
  * MBF21 support (beta)
  * DEHEXTRA works properly now
  * Various enhancements and fixes for ZScript
- Add 0001-gles-look-for-libGLESv2.so.2.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634731200">- Update to release 4.7.1
  * Allow map markers to scale relative to automap zoom.
  * Add cvars to control automap line alpha and thickness.
  * Resolved a VM abort upon morphing while the tome of power is
    active.
- Remove 0001-gles-look-for-libGLESv2.so.2.patch (merged)</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1650024000">- Drop unused nasm from buildrequires.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650715200">- Reenable use of system vulkan libraries on Tumbleweed.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1654516800">- Update to release 4.8.0
  * Added Raze-style HUD scaling. Not exposed in the menu yet,
    Set hud_oldscale to 0 and use shift with the screen resize
    keys to scale the status bar.
  * Handle the start/endoom screens with the ingame renderer.
    They are now present on all platforms and use the full screen
    size of the game.
  * Many MBF21 fixes.
  * Added the cutscene system from Raze.
- Add gzdoom-discord.patch
- Add 0001-Resolve-build-failure-on-i686-linux.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655985600">- Add 0001-Revert-load-the-hex-font-as-early-as-possible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1656244800">- Update to release 4.8.1
  * Bugfix for software mode mirrors not working
  * Feature: Add +ONLYVISIBLEINMIRRORS and +INVISIBLEINMIRRORS
    actor flags. The former makes the actor only visible in
    reflections, while the latter makes the actor not cast
    reflections in mirrors.
- Drop 0001-Resolve-build-failure-on-i686-linux.patch (merged)
- Add 0001-Revert-use-static_assert-to-make-32-bit-builds-fail.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657022400">- Update to release 4.8.2
  * add a few maps to the rebuildnodes compatibility block</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657454400">- Disable rpath</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658664000">- Replace 0001-Revert-load-the-hex-font-as-early-as-possible.patch
  by better fix, 0001-fix-gzdoom.pk3-not-found-error.patch .
- Drop gzdoom-asmjit.patch (no longer needed; the linkage error
  it used to fix seems just gone)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1666612800">- Update gzdoom-vulkan.patch for glslang-11.12.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667649600">- Update to release 4.9.0
  * IQM bone model support
  * Textured particles
  * The SoftPoly renderer was removed
- Delete gzdoom-sdlbug.patch (obsolete),
  0001-fix-gzdoom.pk3-not-found-error.patch (merged)
- Add 0001-build-unbreak-compilation-on-Linux.patch,
  0001-removed-some-32bit-only-CMake-code.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667736000">- Update description for the removal of SoftPoly</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1670155200">- Update to release 4.10.0
  * Map&lt;K,V&gt; and MapIterator&lt;K,V&gt; for ZScript
  * Quaternion support for model rotations
  * Improved IQM support
- Delete 0001-build-unbreak-compilation-on-Linux.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675771200">- Update gzdoom-vulkan.patch for glslang 12</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1680177600">- Add gcc13.diff</changelog>
</package>
<package pkgid="de3df8cc5afbfa42d52b57fe60c7ed110e022f4aa0a427c472df65adca6d992c" name="gzdoom-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600171200">- Drop Recommends for music backends
  (this has moved to zmusic.spec)
- Demote Recommends to Suggests</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614859200">- Add 0001-fixed-zipdir-inability-to-update-empty-zip-file.patch
- Update to release 4.5.0
  * For all of Doom's fullscreen images, there's now widescreen
    versions provided.
  * A simplified options menu is now available for quick setup of
    the important settings.
  * New keybindings presets. Users can now choose between the
    classic layout and a WASD-based one.
  * Menu and intermission screen now scale to the original
    Doom.exe's layout by default.
  * Major additions to the menu system - animated menu
    transitions, image slideshows and fixed size menus can now be
    created.
  * The console now uses the border flat as default background
    instead of the titlepic.
  * It is now possible to fully quit the fullscreen console and
    get back to the title loop.
  * Interpolate positions and angles in the automap for smoother
    appearance.
  * Added $PitchSet for SNDINFO.
  * Allow indirections in the string table by prefixing the
    language string with '$$' the remaining text is interpreted
    as another string label to resolve.
  * Optimization of the patch texture checker - do not read in
    the entire file if checking the initial header is sufficient
    for rejecting it. This can speed up loading of large mods
    quite significantly.
  * OPUS support (via libsndfile)
- Drop gzdoom-spirv.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621684800">- Update to release 4.6
  * Widescreen graphics for Heretic and Hexen
  * Sprite shadows like in the Build engine. Both in software and
    hardware renderer.
  * 16 bit channel PNG files can be read.
  * DEHEXTRA working properly now.
  * Various enhancements and fixes for ZScript.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1627473600">- Update to release 4.6.1
  * Bug fixes, and widepix updates</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632312000">- Update to release 4.7.0
  * GLES2 backend
  * Widescreen graphics for Strife
  * MBF21 support (beta)
  * DEHEXTRA works properly now
  * Various enhancements and fixes for ZScript
- Add 0001-gles-look-for-libGLESv2.so.2.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634731200">- Update to release 4.7.1
  * Allow map markers to scale relative to automap zoom.
  * Add cvars to control automap line alpha and thickness.
  * Resolved a VM abort upon morphing while the tome of power is
    active.
- Remove 0001-gles-look-for-libGLESv2.so.2.patch (merged)</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1650024000">- Drop unused nasm from buildrequires.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650715200">- Reenable use of system vulkan libraries on Tumbleweed.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1654516800">- Update to release 4.8.0
  * Added Raze-style HUD scaling. Not exposed in the menu yet,
    Set hud_oldscale to 0 and use shift with the screen resize
    keys to scale the status bar.
  * Handle the start/endoom screens with the ingame renderer.
    They are now present on all platforms and use the full screen
    size of the game.
  * Many MBF21 fixes.
  * Added the cutscene system from Raze.
- Add gzdoom-discord.patch
- Add 0001-Resolve-build-failure-on-i686-linux.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655985600">- Add 0001-Revert-load-the-hex-font-as-early-as-possible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1656244800">- Update to release 4.8.1
  * Bugfix for software mode mirrors not working
  * Feature: Add +ONLYVISIBLEINMIRRORS and +INVISIBLEINMIRRORS
    actor flags. The former makes the actor only visible in
    reflections, while the latter makes the actor not cast
    reflections in mirrors.
- Drop 0001-Resolve-build-failure-on-i686-linux.patch (merged)
- Add 0001-Revert-use-static_assert-to-make-32-bit-builds-fail.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657022400">- Update to release 4.8.2
  * add a few maps to the rebuildnodes compatibility block</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657454400">- Disable rpath</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658664000">- Replace 0001-Revert-load-the-hex-font-as-early-as-possible.patch
  by better fix, 0001-fix-gzdoom.pk3-not-found-error.patch .
- Drop gzdoom-asmjit.patch (no longer needed; the linkage error
  it used to fix seems just gone)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1666612800">- Update gzdoom-vulkan.patch for glslang-11.12.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667649600">- Update to release 4.9.0
  * IQM bone model support
  * Textured particles
  * The SoftPoly renderer was removed
- Delete gzdoom-sdlbug.patch (obsolete),
  0001-fix-gzdoom.pk3-not-found-error.patch (merged)
- Add 0001-build-unbreak-compilation-on-Linux.patch,
  0001-removed-some-32bit-only-CMake-code.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667736000">- Update description for the removal of SoftPoly</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1670155200">- Update to release 4.10.0
  * Map&lt;K,V&gt; and MapIterator&lt;K,V&gt; for ZScript
  * Quaternion support for model rotations
  * Improved IQM support
- Delete 0001-build-unbreak-compilation-on-Linux.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675771200">- Update gzdoom-vulkan.patch for glslang 12</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1680177600">- Add gcc13.diff</changelog>
</package>
<package pkgid="73e7d771ca4533cd217ddc9872ad03854db6fe83026c7a937b93d470072e2599" name="gzdoom-debugsource" arch="aarch64">
  <version epoch="0" ver="4.10.0" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600171200">- Drop Recommends for music backends
  (this has moved to zmusic.spec)
- Demote Recommends to Suggests</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614859200">- Add 0001-fixed-zipdir-inability-to-update-empty-zip-file.patch
- Update to release 4.5.0
  * For all of Doom's fullscreen images, there's now widescreen
    versions provided.
  * A simplified options menu is now available for quick setup of
    the important settings.
  * New keybindings presets. Users can now choose between the
    classic layout and a WASD-based one.
  * Menu and intermission screen now scale to the original
    Doom.exe's layout by default.
  * Major additions to the menu system - animated menu
    transitions, image slideshows and fixed size menus can now be
    created.
  * The console now uses the border flat as default background
    instead of the titlepic.
  * It is now possible to fully quit the fullscreen console and
    get back to the title loop.
  * Interpolate positions and angles in the automap for smoother
    appearance.
  * Added $PitchSet for SNDINFO.
  * Allow indirections in the string table by prefixing the
    language string with '$$' the remaining text is interpreted
    as another string label to resolve.
  * Optimization of the patch texture checker - do not read in
    the entire file if checking the initial header is sufficient
    for rejecting it. This can speed up loading of large mods
    quite significantly.
  * OPUS support (via libsndfile)
- Drop gzdoom-spirv.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621684800">- Update to release 4.6
  * Widescreen graphics for Heretic and Hexen
  * Sprite shadows like in the Build engine. Both in software and
    hardware renderer.
  * 16 bit channel PNG files can be read.
  * DEHEXTRA working properly now.
  * Various enhancements and fixes for ZScript.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1627473600">- Update to release 4.6.1
  * Bug fixes, and widepix updates</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632312000">- Update to release 4.7.0
  * GLES2 backend
  * Widescreen graphics for Strife
  * MBF21 support (beta)
  * DEHEXTRA works properly now
  * Various enhancements and fixes for ZScript
- Add 0001-gles-look-for-libGLESv2.so.2.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634731200">- Update to release 4.7.1
  * Allow map markers to scale relative to automap zoom.
  * Add cvars to control automap line alpha and thickness.
  * Resolved a VM abort upon morphing while the tome of power is
    active.
- Remove 0001-gles-look-for-libGLESv2.so.2.patch (merged)</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1650024000">- Drop unused nasm from buildrequires.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650715200">- Reenable use of system vulkan libraries on Tumbleweed.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1654516800">- Update to release 4.8.0
  * Added Raze-style HUD scaling. Not exposed in the menu yet,
    Set hud_oldscale to 0 and use shift with the screen resize
    keys to scale the status bar.
  * Handle the start/endoom screens with the ingame renderer.
    They are now present on all platforms and use the full screen
    size of the game.
  * Many MBF21 fixes.
  * Added the cutscene system from Raze.
- Add gzdoom-discord.patch
- Add 0001-Resolve-build-failure-on-i686-linux.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655985600">- Add 0001-Revert-load-the-hex-font-as-early-as-possible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1656244800">- Update to release 4.8.1
  * Bugfix for software mode mirrors not working
  * Feature: Add +ONLYVISIBLEINMIRRORS and +INVISIBLEINMIRRORS
    actor flags. The former makes the actor only visible in
    reflections, while the latter makes the actor not cast
    reflections in mirrors.
- Drop 0001-Resolve-build-failure-on-i686-linux.patch (merged)
- Add 0001-Revert-use-static_assert-to-make-32-bit-builds-fail.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657022400">- Update to release 4.8.2
  * add a few maps to the rebuildnodes compatibility block</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657454400">- Disable rpath</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658664000">- Replace 0001-Revert-load-the-hex-font-as-early-as-possible.patch
  by better fix, 0001-fix-gzdoom.pk3-not-found-error.patch .
- Drop gzdoom-asmjit.patch (no longer needed; the linkage error
  it used to fix seems just gone)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1666612800">- Update gzdoom-vulkan.patch for glslang-11.12.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667649600">- Update to release 4.9.0
  * IQM bone model support
  * Textured particles
  * The SoftPoly renderer was removed
- Delete gzdoom-sdlbug.patch (obsolete),
  0001-fix-gzdoom.pk3-not-found-error.patch (merged)
- Add 0001-build-unbreak-compilation-on-Linux.patch,
  0001-removed-some-32bit-only-CMake-code.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667736000">- Update description for the removal of SoftPoly</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1670155200">- Update to release 4.10.0
  * Map&lt;K,V&gt; and MapIterator&lt;K,V&gt; for ZScript
  * Quaternion support for model rotations
  * Improved IQM support
- Delete 0001-build-unbreak-compilation-on-Linux.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675771200">- Update gzdoom-vulkan.patch for glslang 12</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1680177600">- Add gcc13.diff</changelog>
</package>
<package pkgid="ca70064f07e7f47611e87fa7d44cab45b4f1e18d016be366482a3e8557b71a1a" name="gzdoom-debugsource" arch="s390x">
  <version epoch="0" ver="4.10.0" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600171200">- Drop Recommends for music backends
  (this has moved to zmusic.spec)
- Demote Recommends to Suggests</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614859200">- Add 0001-fixed-zipdir-inability-to-update-empty-zip-file.patch
- Update to release 4.5.0
  * For all of Doom's fullscreen images, there's now widescreen
    versions provided.
  * A simplified options menu is now available for quick setup of
    the important settings.
  * New keybindings presets. Users can now choose between the
    classic layout and a WASD-based one.
  * Menu and intermission screen now scale to the original
    Doom.exe's layout by default.
  * Major additions to the menu system - animated menu
    transitions, image slideshows and fixed size menus can now be
    created.
  * The console now uses the border flat as default background
    instead of the titlepic.
  * It is now possible to fully quit the fullscreen console and
    get back to the title loop.
  * Interpolate positions and angles in the automap for smoother
    appearance.
  * Added $PitchSet for SNDINFO.
  * Allow indirections in the string table by prefixing the
    language string with '$$' the remaining text is interpreted
    as another string label to resolve.
  * Optimization of the patch texture checker - do not read in
    the entire file if checking the initial header is sufficient
    for rejecting it. This can speed up loading of large mods
    quite significantly.
  * OPUS support (via libsndfile)
- Drop gzdoom-spirv.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621684800">- Update to release 4.6
  * Widescreen graphics for Heretic and Hexen
  * Sprite shadows like in the Build engine. Both in software and
    hardware renderer.
  * 16 bit channel PNG files can be read.
  * DEHEXTRA working properly now.
  * Various enhancements and fixes for ZScript.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1627473600">- Update to release 4.6.1
  * Bug fixes, and widepix updates</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632312000">- Update to release 4.7.0
  * GLES2 backend
  * Widescreen graphics for Strife
  * MBF21 support (beta)
  * DEHEXTRA works properly now
  * Various enhancements and fixes for ZScript
- Add 0001-gles-look-for-libGLESv2.so.2.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634731200">- Update to release 4.7.1
  * Allow map markers to scale relative to automap zoom.
  * Add cvars to control automap line alpha and thickness.
  * Resolved a VM abort upon morphing while the tome of power is
    active.
- Remove 0001-gles-look-for-libGLESv2.so.2.patch (merged)</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1650024000">- Drop unused nasm from buildrequires.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650715200">- Reenable use of system vulkan libraries on Tumbleweed.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1654516800">- Update to release 4.8.0
  * Added Raze-style HUD scaling. Not exposed in the menu yet,
    Set hud_oldscale to 0 and use shift with the screen resize
    keys to scale the status bar.
  * Handle the start/endoom screens with the ingame renderer.
    They are now present on all platforms and use the full screen
    size of the game.
  * Many MBF21 fixes.
  * Added the cutscene system from Raze.
- Add gzdoom-discord.patch
- Add 0001-Resolve-build-failure-on-i686-linux.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655985600">- Add 0001-Revert-load-the-hex-font-as-early-as-possible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1656244800">- Update to release 4.8.1
  * Bugfix for software mode mirrors not working
  * Feature: Add +ONLYVISIBLEINMIRRORS and +INVISIBLEINMIRRORS
    actor flags. The former makes the actor only visible in
    reflections, while the latter makes the actor not cast
    reflections in mirrors.
- Drop 0001-Resolve-build-failure-on-i686-linux.patch (merged)
- Add 0001-Revert-use-static_assert-to-make-32-bit-builds-fail.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657022400">- Update to release 4.8.2
  * add a few maps to the rebuildnodes compatibility block</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657454400">- Disable rpath</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658664000">- Replace 0001-Revert-load-the-hex-font-as-early-as-possible.patch
  by better fix, 0001-fix-gzdoom.pk3-not-found-error.patch .
- Drop gzdoom-asmjit.patch (no longer needed; the linkage error
  it used to fix seems just gone)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1666612800">- Update gzdoom-vulkan.patch for glslang-11.12.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667649600">- Update to release 4.9.0
  * IQM bone model support
  * Textured particles
  * The SoftPoly renderer was removed
- Delete gzdoom-sdlbug.patch (obsolete),
  0001-fix-gzdoom.pk3-not-found-error.patch (merged)
- Add 0001-build-unbreak-compilation-on-Linux.patch,
  0001-removed-some-32bit-only-CMake-code.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667736000">- Update description for the removal of SoftPoly</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1670155200">- Update to release 4.10.0
  * Map&lt;K,V&gt; and MapIterator&lt;K,V&gt; for ZScript
  * Quaternion support for model rotations
  * Improved IQM support
- Delete 0001-build-unbreak-compilation-on-Linux.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675771200">- Update gzdoom-vulkan.patch for glslang 12</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1680177600">- Add gcc13.diff</changelog>
</package>
<package pkgid="2c18a7d9e7751dbc7c93f84fca5a3410d4bf775ed56e219ce67de89dfb907141" name="gzdoom-debugsource" arch="x86_64">
  <version epoch="0" ver="4.10.0" rel="bp154.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1600171200">- Drop Recommends for music backends
  (this has moved to zmusic.spec)
- Demote Recommends to Suggests</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1614859200">- Add 0001-fixed-zipdir-inability-to-update-empty-zip-file.patch
- Update to release 4.5.0
  * For all of Doom's fullscreen images, there's now widescreen
    versions provided.
  * A simplified options menu is now available for quick setup of
    the important settings.
  * New keybindings presets. Users can now choose between the
    classic layout and a WASD-based one.
  * Menu and intermission screen now scale to the original
    Doom.exe's layout by default.
  * Major additions to the menu system - animated menu
    transitions, image slideshows and fixed size menus can now be
    created.
  * The console now uses the border flat as default background
    instead of the titlepic.
  * It is now possible to fully quit the fullscreen console and
    get back to the title loop.
  * Interpolate positions and angles in the automap for smoother
    appearance.
  * Added $PitchSet for SNDINFO.
  * Allow indirections in the string table by prefixing the
    language string with '$$' the remaining text is interpreted
    as another string label to resolve.
  * Optimization of the patch texture checker - do not read in
    the entire file if checking the initial header is sufficient
    for rejecting it. This can speed up loading of large mods
    quite significantly.
  * OPUS support (via libsndfile)
- Drop gzdoom-spirv.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621684800">- Update to release 4.6
  * Widescreen graphics for Heretic and Hexen
  * Sprite shadows like in the Build engine. Both in software and
    hardware renderer.
  * 16 bit channel PNG files can be read.
  * DEHEXTRA working properly now.
  * Various enhancements and fixes for ZScript.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1627473600">- Update to release 4.6.1
  * Bug fixes, and widepix updates</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632312000">- Update to release 4.7.0
  * GLES2 backend
  * Widescreen graphics for Strife
  * MBF21 support (beta)
  * DEHEXTRA works properly now
  * Various enhancements and fixes for ZScript
- Add 0001-gles-look-for-libGLESv2.so.2.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1634731200">- Update to release 4.7.1
  * Allow map markers to scale relative to automap zoom.
  * Add cvars to control automap line alpha and thickness.
  * Resolved a VM abort upon morphing while the tome of power is
    active.
- Remove 0001-gles-look-for-libGLESv2.so.2.patch (merged)</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1650024000">- Drop unused nasm from buildrequires.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1650715200">- Reenable use of system vulkan libraries on Tumbleweed.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1654516800">- Update to release 4.8.0
  * Added Raze-style HUD scaling. Not exposed in the menu yet,
    Set hud_oldscale to 0 and use shift with the screen resize
    keys to scale the status bar.
  * Handle the start/endoom screens with the ingame renderer.
    They are now present on all platforms and use the full screen
    size of the game.
  * Many MBF21 fixes.
  * Added the cutscene system from Raze.
- Add gzdoom-discord.patch
- Add 0001-Resolve-build-failure-on-i686-linux.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1655985600">- Add 0001-Revert-load-the-hex-font-as-early-as-possible.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1656244800">- Update to release 4.8.1
  * Bugfix for software mode mirrors not working
  * Feature: Add +ONLYVISIBLEINMIRRORS and +INVISIBLEINMIRRORS
    actor flags. The former makes the actor only visible in
    reflections, while the latter makes the actor not cast
    reflections in mirrors.
- Drop 0001-Resolve-build-failure-on-i686-linux.patch (merged)
- Add 0001-Revert-use-static_assert-to-make-32-bit-builds-fail.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657022400">- Update to release 4.8.2
  * add a few maps to the rebuildnodes compatibility block</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1657454400">- Disable rpath</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1658664000">- Replace 0001-Revert-load-the-hex-font-as-early-as-possible.patch
  by better fix, 0001-fix-gzdoom.pk3-not-found-error.patch .
- Drop gzdoom-asmjit.patch (no longer needed; the linkage error
  it used to fix seems just gone)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1666612800">- Update gzdoom-vulkan.patch for glslang-11.12.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667649600">- Update to release 4.9.0
  * IQM bone model support
  * Textured particles
  * The SoftPoly renderer was removed
- Delete gzdoom-sdlbug.patch (obsolete),
  0001-fix-gzdoom.pk3-not-found-error.patch (merged)
- Add 0001-build-unbreak-compilation-on-Linux.patch,
  0001-removed-some-32bit-only-CMake-code.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667736000">- Update description for the removal of SoftPoly</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1670155200">- Update to release 4.10.0
  * Map&lt;K,V&gt; and MapIterator&lt;K,V&gt; for ZScript
  * Quaternion support for model rotations
  * Improved IQM support
- Delete 0001-build-unbreak-compilation-on-Linux.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675771200">- Update gzdoom-vulkan.patch for glslang 12</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1680177600">- Add gcc13.diff</changelog>
</package>
<package pkgid="4dfee64e3001fc88207f4ba4a617a2460e2eb07486f48255d985d9831b06cd18" name="libSoQt20-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="e2716033b63b82d5e7a6e59c39269a663b1d92dcc947d9cbea6cb19e2317f62f" name="libSoQt20-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="ee5606b08734c79add39b73faabdfaf04c9c5e2af994b9f48cba6f727320d998" name="libSoQt20-debuginfo" arch="s390x">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="7e93496f059d90d08e407b9190fadbf81e91dc303b685529f6ea328f738b9ac4" name="libSoQt20-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="bp154.2.3.1"/>
  <changelog author="malcolmlewis@opensuse.org" date="1288958400">- Spec file fixes based on rpmlint report</changelog>
  <changelog author="adrian@suse.de" date="1467720000">- update to version 1.5.0
- use Qt4 instead of Qt3 ....</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Rectify RPM groups. Use smp_mflags for parallel building.
  Drop redundant export CFLAGS lines. Rename %soname to %sover
  because it did not contain the soname.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Cleanup spec file:
  - move soqt-default.cfg to devel package, it is only used by soqt-config
  - make doc subpackage noarch
  - use %_docdir</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1557144000">- update to current snapshot
- fix URL, old coin3d.org site has been shut down
- using cmake build system now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Run spec-cleaner
- Install the license file
- Add 0001-Use-a-Find-module-to-find-older-Coin-versions.patch
  This will allow using the stable Coin package to build the SoQt
  snapshot.
- Drop fix-cmake-install.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748801">- Drop invalid requires of doc sub package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574683200">- Fix invalid Requires: in pkgconfig file, replace Qt(4) with Qt5.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1615204800">- update to final 1.6.0:
  * see https://raw.githubusercontent.com/coin3d/soqt/SoQt-1.6.0/NEWS</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645531200">- Adapt for Coin4, remove
  0001-Use-a-Find-module-to-find-older-Coin-versions.patch
- Fix License, SoQt since 1.6.0 is BSD-3-Clause
- Drop irrelevant SoQt-man3.patch</changelog>
</package>
<package pkgid="403153b78b31695a7eab5c1fa9894635bc8e0dd99fde27b08c058c655dba2bf9" name="libchafa0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="6ba8dce69685a693f52b570116a36f28d23c8be85595871b33a6e1a5086201ab" name="libchafa0-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="730ffa61185611b2bff7b023895bb95b9be4051d07c995b268b93efa26a0a074" name="libchafa0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="dadc295dc8380118caddea34f070c247e75aafebe2244bcd4be8e8e115989586" name="libchafa0-debuginfo" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="1596fb349dcbd7c8881540cf92a50e8be43ed27b4db6224b378238e4ef1628f3" name="libchafa0-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="bp154.3.8.1"/>
  <changelog author="mvetter@suse.com" date="1549627200">- Initial package chafa 1.0.1 for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1565006400">- Update to 1.2.0:
  * Added --dither, --dither-grain and --dither-intensity options.
    These allow for sub-cell dithering in quantized modes (none,
    2, 16, 240 and 256). Especially beneficial when used with
  - p off.
  * Added API for ordered and diffusion-based dithering in quantization.
  * Added API support for multiple 8bpc pixel modes: RGB, BGR, RGBA,
    BGRA, ARGB, ABGR with either premultiplied or unassociated alpha channels.
  * Smooth scaling is now done internally, meaning libchafa
    consumers no longer need to prescale images.
  * Implemented a machine learning tool that can generate custom
    fonts for efficient image reproduction from a provided dataset.
    This is left uninstalled since it's still experimental
  * Throughput improvements:
    + GIF animations now start playing instantly.
    + GIF CPU overhead reduced by 75%, peak memory use down 95%-99% (!).
    + XWD common case CPU overhead down 60-70%, peak memory down 70%.
    + Additional halving of CPU overhead in 240- and 256-color modes.
    + Streamlined pixel pipeline for better parallelization.
  * Installation instructions:
    + New: Guix (Guy Fleury Iteriteka).
    + New: openSUSE (@jubalh).
  * Bug fixes:
    + [unfiled] Certain SVGs had transparency replaced with a white background (nemo).
    + [unfiled] -lm dependency belongs in libchafa, not frontend.</changelog>
  <changelog author="mvetter@suse.com" date="1566302400">- Update to 1.2.1:
  * Detect kitty and mlterm virtual terminals and apply optimal
    defaults accordingly
  * Make Automake build more strict and fix a few compatibility nits
  * Fix #30 - Failed to build on hurd-i386
  * Fix crash on certain broken GIFs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Update descriptions.
- Avoid double-shipping documentation, and make docs noarch.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1583323200">- Update to 1.2.2:
  * Fix #34 Cannot compile example</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1585828800">- Update to 1.4.0:
  * Added sixel graphics support. Chafa will automatically produce sixels
    if the connected terminal supports it. It can also be forced using the
    new -f or --format flag. This is a new implementation written from the
    ground up to maximize throughput.
  * Added the --glyph-file option, which loads glyph-symbol mappings from
    any file format supported by FreeType (TTF, PCF, etc). This allows for
    custom font support and improved symbol selection.
  * Added the --speed option specifying animation speed. It accepts a
    unitless multiplier, a specific number of frames per second, or max
    for maximum throughput.
  * There are now two ways to assign colors to symbol cells. Formerly,
    this was done based on the average color of the covered area. The new
    default is to use the median color, which produces sharper edges,
    but is slightly more prone to high-frequency noise. The new option
  - -color-extractor selects the method to employ.
  * When displaying multiple files, the default delay between files has
    been changed from three seconds to zero. Animations will still play
    through once. This can be overridden on the chafa command line with -d
    or --duration.
  * Minor tweaks to built-in symbols.
  Performance improvements:
  * Halved pixel storage requirements from 64 bits to 32 bits,
    resulting in significant memory savings.
  * Now builds with -ffast-math, yielding a big speedup for DIN99d.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1586692800">- Update to 1.4.1:
  * Added configure option --disable-rpath. This allows packagers to
    prevent the hard-coded library search path from being embedded in
    the chafa command-line tool (Mo Zhou, #39).
  * Added defaults for the yaft terminal.
  Bug fixes:
  * #40 - Fails to build on hurd-i386 + other i386 (reported by Mo
    Zhou).
  * [unfiled] - Rare failed assert with mostly transparent sixel image
    (reported by Reddit user spryfigure).
  * [unfiled] - Minor typo in function docstring.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1610712000">- Update to 1.6.0:
  * Added support for fullwidth symbols that take up two character
    cells. These are common in East Asian scripts. Single-cell and
    double-cell symbols can be mixed, and -f symbols mode will use
    both if possible.
  * New symbol tags: alpha, digit, alnum, narrow, wide, ambiguous,
    ugly, bad. "Ambiguous" symbols have uncertain widths and may
    render poorly in some terminals. "Ugly" denotes symbols that
    are unsuitable for Chafa's cell-based graphics (multicolor
    emoji, ideographic descriptors, etc). "Bad" is a superset of
    these two categories. Bad symbols are always excluded unless
    explicitly enabled with e.g. CHAFA_SYMBOL_TAG_BAD (--symbols
    +bad in the frontend).
  * The font loader (--glyph-file option) now does a better job
    with proportional fonts.
  * Added options for controlling lossless optimization of output.
    Currently, attribute reuse and character repetition (REP
    sequence) are implemented.
  * Added -O option to the frontend. This controls the optimization
    level.
  * Added a simple abstraction layer for terminal control sequences
    (ChafaTermInfo and ChafaTermDb). This allows for improved
    terminal support.
  * FbTerm is now supported with TERM=fbterm in the environment.
  * Bug fixes:
  - #43 Fix signal handler.
  - [unfiled] Crash when invalid font paths were passed on command line.
  - [unfiled] Small typo in fontgen's READM).
  - [unfiled] Bad contrast adjustment in images with transparency.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1623067200">- Update to 1.6.1:
  * Add NOCONFIGURE variable to autogen.sh to skip configure
  Bug fixes:
  * #50 SIGBUS while loading huge GIFs
  * #52 Produces small glitches in output with some images
  * #54 Haiku port fails on 32bit
  * [unfiled] Exclude RTL code points that could break the output.
  * [unfiled] Apple Terminal lacks truecolor support, so make it
    default to 256 colors
  * [unfiled] Fix typo affecting middle dot symbol.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1630497600">- Update to 1.8.0:
  * Added basic support for the Kitty and iTerm2 graphics protocols.
    These are enabled automatically when corresponding terminal support
    is detected, or manually with -f kitty or -f iterm.
  * Implemented an 8-color mode, selectable with -c 8
  * Implemented a foreground-only switch, --fg-only. This produces
    character art using foreground colors only, and will avoid
    modifying or resetting the background color. Looks best with
    non-contiguous symbols (e.g. ascii).
  * Added builtins for Japanese kana fullwidth symbols. These can
    now be used without loading any external fonts (try -c none --symbols wide).
  * Added builtins for legacy computer symbols (mainly wedges and
    sextant blocks). These were widely used in PETSCII and Teletext,
    and can be enabled using --symbols or --fill with their respective
    tags: legacy, wedge and sextant (@hodefoting).
  * Since there is a growing number of builtin symbols that may not
    be available everywhere, the default selection has been restricted
    to the widely supported block and border sets.
  * If possible, we now select a visually blank character from the
    specified symbol/fill sets instead of hardcoding ASCII space for
    featureless cells. One practical upshot of this is that the constant-width
    braille range can be used to produce consistent images even in contexts
    with variable-width fonts. U+2800 (BRAILLE PATTERN BLANK) will then be used in blank cells.
  * Improved terminal size detection when used with pipelines and redirection.
    This should now produce an image properly sized for your terminal:
    curl https://i.imgur.com/WFDEFVg.jpeg | chafa - | tee out
  * ChafaCanvas gained API functions for programmatically getting and
    setting character cell contents. These are used in a new example
    in tests/ncurses.c demonstrating ncurses integration.
  * Made --disable-rpath the default in order to simplify packaging.
  * Added a HACKING file featuring a much needed release checklist.
  * Improved terminal support:
    + Ctx will now use optimizing REP sequences at high -O levels.
    + foot now defaults to sixels.
    + iTerm2 now defaults to the iTerm2 protocol.
    + Kitty now defaults to the Kitty protocol.
    + st now defaults to truecolor symbols.
  * Bug fixes:
    + #44 Missing error handling on stdout writes.
    + [unfiled] Solid symbols erroneously replaced by fill in FGBG mode.
    + [unfiled] Integer formatter was not using fast path for 8-bit values.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1651147200">- bsc#1198965 (CVE-2022-1507): Fix NULL pointer deref in gif_internal_decode_frame
  * Add chafa-CVE-2022-1507.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1655294400">- bsc#1200510 (CVE-2022-2061): Fix heap based buffer overflow
  in lzw_decode
  * Add chafa-CVE-2022-2061.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1657022400">- bsc#1201211 (CVE-2022-2301): Fix buffer over-read
  * Add chafa-CVE-2022-2301.patch</changelog>
</package>
<package pkgid="d60febeadac39b043e8f61b37c87030cac5ad14f8438594d74156ee649b22703" name="libdxfrw-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="acb52037d857d9558e1960734575f8de600b79d305e1ccb48f7654fea5487192" name="libdxfrw-debuginfo" arch="i586">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="515ce6ca35e5187b4a728a19e3dc1d9da0a459ac79d81092c4d5c1c02bed1daf" name="libdxfrw-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="cc6699603d686679cbdaabef924aa9ac56dad3b360f49db62797e0c84d224b6e" name="libdxfrw-debuginfo" arch="s390x">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="d515f6ca6b50b90bb21c40440176d0244a76f160ef86a1746708886dbb86efc3" name="libdxfrw-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="4ef267726293b4efe78c43262855066fdc24e0e6e49d3d97fdf898eff114f904" name="libdxfrw-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="8eb5272294ee27e901235378833aca2d27f2c509a8d13119dd1cb0b108217686" name="libdxfrw-debugsource" arch="i586">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="d9a72b48d586e1affe94f039b299b3a64bea2fbf25e3dfe84f183de2ef73125c" name="libdxfrw-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="574f079a5f988ce9720019bd7107d86687d3c2f9da1b053c19a68f660f11480a" name="libdxfrw-debugsource" arch="s390x">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="96084613f397640fe1a1a9df65e21cfcb063325e1beb259467dcd9383ecd2c26" name="libdxfrw-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="44620ed1f2f3513639dd918c43aed8126e7f489020957b7e4b4826b5d5c6f63d" name="libdxfrw-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="84b168c5bca31aed5e1e788409436528ba7ad293b9e3429a5a218fdba11b4d38" name="libdxfrw-tools-debuginfo" arch="i586">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="37268574bd08fd5e3bf7689ce0ff3ea19dacc960318d878e57316f29c1d398f5" name="libdxfrw-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="5f4c011ff800d38a44e48ea08b63d697d7936fb7b937d6f20c6be1d5fa0d28ae" name="libdxfrw-tools-debuginfo" arch="s390x">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="f4efc7a88c8c2e340f7786349715c01bd7f2d83801bd4cca536b7a9bce0b33d2" name="libdxfrw-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="ecdb964e997cb0a03911a8b2b2ac5f12d82c3fd22413f943b6819a68403b034c" name="libdxfrw1-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="c77f2307fae14385b8fb818c731ceefa535b5893747dbfa5f34814a265a67da4" name="libdxfrw1-debuginfo" arch="i586">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="0fd89a972cea5efd79f8d8b2278d5686232e2f3ca1297868dbbf3a123602798b" name="libdxfrw1-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="b068c3cd61f3bf91ff71db54f01c32637459f8f45b32dfee02f50f060b40e7d9" name="libdxfrw1-debuginfo" arch="s390x">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="3cb2b193a5ccb2bebca24658b8a57114990c1ef82189ee2f4cb2a8124eaf2780" name="libdxfrw1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.1+git.20220109" rel="bp154.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1392811200">- Initial rpm release (version 0.5.11).</changelog>
  <changelog author="jengelh@inai.de" date="1399636800">- Set RPM group to more usual values</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1407499200">- Update to version 0.5.12:
  * Detailed changelog not available.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441800000">- Update to version 0.6.1:
  * Detailed changelog not available.
  From version 0.6.0:
  * First version with dwg read support.</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.6.3
  * No changelog available for this version</changelog>
  <changelog author="jslaby@suse.com" date="1465300800">- add libdxfrw-LibreCad-2.1.0-changes.patch
- we need -std=c++11 for that patch to work</changelog>
  <changelog author="jslaby@suse.com" date="1558267200">- switch from sourceforge to more up-to-date github repo
- Update to version 0.6.3+git.20190501:
  * Add build status and update example link
  * Add Travis-CI script
  * [#10] Fix compilation on GCC
  * Fix bugs with .dwg import of TEXT and MTEXT entities
  * This was unnecessary
  * Link libdxfrw against libstdc++
  * Return an error when the file ends prematurely
  * Add version getter
  * Fix polyline 2d/3d write
  * Initialize return buffers in GetRawChar8 et al.
- add
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch
- remove
  * libdxfrw-LibreCad-2.1.0-changes.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1620129600">- Update to version 1.0.1+git.20200429:
  * Fix includes install dir
  * Export target as libdxfrw::libdxfrw to keep consistency with Conan packages
  * Add archive destination in install
  * Install DXFRW::dxfrw target
  * Remove duplicate target properties
  * Remove version from pkg-config file
  * Let CMake handle C++11 compiler definition
  * Change minimal required CMake version to 3.0
  * cmake: add doc target
  * README.md: fix typo
  * cmake: generate and install pkgconfig
  * cmake: add one for dwg2dxf
  * cmake: set library VERSIONs
  * cmake: use GNUInstallDirs
- add patches (build fixes)
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch
  * drw_header-fix-indentation-level.patch
- remove patches (they got upstreamed)
  * 0001-cmake-use-GNUInstallDirs.patch
  * 0002-cmake-set-library-VERSIONs.patch
  * 0003-cmake-add-one-for-dwg2dxf.patch
  * 0004-cmake-generate-and-install-pkgconfig.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1640001600">- Update to version 1.0.1+git.20211110:
  * fixed heap use after free vulnerability CVE-2021-21900 (bsc#1192938)
  * minor improvements to dwg2dxf, formatting and message output on success
  * fixed heap buffer overflow vulnerability CVE-2021-21899 (bsc#1192937)
  * dwg2dxf - enable debug output of libdxfrw by command line switch
  * fixed out-of-bounds write vulnerability CVE-2021-21898 (bsc#1192936)
  * fixed please note section formatting
  * updated README.md for LibreCAD_3 branch and sf.net successor
  * fixed LibreCAD 2 issue #1371, read failed with binary DXF
  * Use ununordered_map instead of map
  * manual merge changes from LibreCAD2
  * and much more
- added
  * 0001-fix-Vertex-ID-printout.patch
- removed (they are upstream)
  * drw_header-fix-indentation-level.patch
  * libdxfrw.pc.in-fix-expansion-and-include-path.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1642507200">- Update to version 1.0.1+git.20220109:
  * fixed ambiguous error for DRW_Dimension::parseDwg()
  * fixed enless while()-loop for pre 2004 versions
  * dwgReader::readDwgObjects() stop reading after 1st error
  * dwgReader::readDwgEntities() stop reading after 1st error
  * replace ENTRY_PARSE macro with template method
  * remove unused DRW_Class::parseCode() method
  * protect vector&lt;&gt;.reserve() calls
  * Added NULL check for hatch code 93
  * Fix bounds check in DRW_LWPolyline
  * fix, check maxClassNum for valid value
  * fixed wrong 2010+ check for 64-bit size
  * Set compiler warnings on by default, because makes harder for bugs to go undetected. 	modified:   CMakeLists.txt
  * Fixed fall through and other warnings (#54)
  * fix "Vertex ID" printout
- remove (it is upstream)
  * 0001-fix-Vertex-ID-printout.patch</changelog>
</package>
<package pkgid="fa0f78c73245974f0ef2677d3a8eee52f19498ce0695dbcea5015b4be0b55bab" name="libgdcm3_0-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="216869869c5ccacc6bcb859a8de9feee3e37fdf7bbad430f9c2cb04e2cfb8ca4" name="libgdcm3_0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="8d5f2e152814ad1ede583e56ee8b64a6017d3f73fe9b20987cb63cb4437a3d34" name="libgdcm3_0-debuginfo" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="91456d68839324237992cbffd224eda44ade20155204d6f08a019cba79184162" name="libgdcm3_0-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="93bb54b353c837a6121694a72851fec7014db521ac7e1bdb523dd29139214e2f" name="libptytty-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="246f6e96900dcc94a9a6678ba97d1bea811273c2f074a26b6274f11ce6586568" name="libptytty-debugsource" arch="i586">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="158734dacbadb17c97de2cc44fe1c64abb62fcdf0b0879bb05c463326a6e3712" name="libptytty-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="22c56015d1c62fb56e207ac5d24dbedd712d6bfdb25c22e3ec22dcb595baa419" name="libptytty-debugsource" arch="s390x">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="e7bd83a2ac9cda7b5823a45c578ef752a588e6fc0108693cf2215a497a310359" name="libptytty-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="9ccd3e250c5a80cb55e4d1933c1306bf8583262cf19305b440e2622dd0401f58" name="libptytty0-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="0e53e9d2a80fd3c25938872d35dc83080b2ba71452bcde0f54e3c43fc432aa4d" name="libptytty0-debuginfo" arch="i586">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="f27709feec1e26974481b399f6960835c40bbe958bf52beba6be2dfe9bde412c" name="libptytty0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="318000dcc51abaed83f90d21d14aaae8b2edbe3cb94315ba51957b135626ffb6" name="libptytty0-debuginfo" arch="s390x">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="fe1c90e73a98012d6960d923984e39400c4e06e46519520df6f33b54d55503b1" name="libptytty0-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0" rel="bp154.2.1"/>
  <changelog author="tiwai@suse.de" date="1643371200">- Initial version: 2.0</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1646136000">- Remove old specfile constructs like BuildRoot.</changelog>
</package>
<package pkgid="a86ffc1e073570c3e769fefa8dce9015c041f30379a7bcb1fe319d70df9cf994" name="libre2-10-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="20230301" rel="bp154.9.3.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604577600">- Update to version 2020-11-01:
  * Refactoring and fixes</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to version 2021-02-02:
  * Address `-Wnull-dereference' warnings from GCC 10.x.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618488000">- Update to 2021-04-01:
  * Make cached benchmarks actually use cached objects
  * Address some -Wmissing-field-initializers warnings
  * Make it easier to swap in a scalable reaer-writer mutex
  * In the shared library, set compatibility version and
    current version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623499200">- update to 2021-06-01:
  * Fix (|a)* matching more text than (|a)+
  * build system tweaks and developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1628251200">- update to 2021-08-01:
  * case-insensitive prefix acceleration</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to 2021-09-01:
  * Permit Unicode characters beyond ASCII in capture names</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1636113600">- Update to 2021-11-01:
  * Update Unicode data to 14.0.0
  * Address a `-Wshadow' warning</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1643976000">- Update to 2022-02-01:
  * Address a `-Wunused-but-set-variable' warning from Clang 13.x
  * Don't specify the -std flag in Makefile or re2.pc
  * Remove a redundant map access</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648814400">- Update to 2022-04-01:
  * Improve performance slightly
  * Prog::Fangout() is no longer experimental</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1650801600">- Switch build to CMake, otherwise CMake config is not installed.
  Required for Apache ORC and arrow, and google-or-tools.
  (https://github.com/google/re2/issues/304)
- Run some real tests via CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650974400">- Disable tests on ZSystems and RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651060800">- Disable tests on ARMv6</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651147200">- Avoid sporadic failures by setting until-pass on CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651406400">- Use Release config so O3 is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654084800">- update to 2022-06-01:
  * switch to cxx_std_11 and other developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670155200">- update to 2022-12-01:
  * Update to Unicode 15.0.0 data
  * cmake install now installs the pkg-config file</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675512000">- update to 2023-02-01:
  * improved support for ICU
- build with ICU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678190400">- update to 2023-03-01:
  * changes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Require GCC 12 on Leap due to code containing speed ups which
  require newer standards
- Allow tests to fail - they fail too often</changelog>
</package>
<package pkgid="00835c46cc2d7a121a19f21e60143e6948b148179a3cc7b49e711c1ae2a05517" name="libre2-10-64bit-debuginfo" arch="aarch64_ilp32">
  <version epoch="0" ver="20230301" rel="bp154.9.3.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604577600">- Update to version 2020-11-01:
  * Refactoring and fixes</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to version 2021-02-02:
  * Address `-Wnull-dereference' warnings from GCC 10.x.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618488000">- Update to 2021-04-01:
  * Make cached benchmarks actually use cached objects
  * Address some -Wmissing-field-initializers warnings
  * Make it easier to swap in a scalable reaer-writer mutex
  * In the shared library, set compatibility version and
    current version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623499200">- update to 2021-06-01:
  * Fix (|a)* matching more text than (|a)+
  * build system tweaks and developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1628251200">- update to 2021-08-01:
  * case-insensitive prefix acceleration</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to 2021-09-01:
  * Permit Unicode characters beyond ASCII in capture names</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1636113600">- Update to 2021-11-01:
  * Update Unicode data to 14.0.0
  * Address a `-Wshadow' warning</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1643976000">- Update to 2022-02-01:
  * Address a `-Wunused-but-set-variable' warning from Clang 13.x
  * Don't specify the -std flag in Makefile or re2.pc
  * Remove a redundant map access</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648814400">- Update to 2022-04-01:
  * Improve performance slightly
  * Prog::Fangout() is no longer experimental</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1650801600">- Switch build to CMake, otherwise CMake config is not installed.
  Required for Apache ORC and arrow, and google-or-tools.
  (https://github.com/google/re2/issues/304)
- Run some real tests via CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650974400">- Disable tests on ZSystems and RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651060800">- Disable tests on ARMv6</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651147200">- Avoid sporadic failures by setting until-pass on CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651406400">- Use Release config so O3 is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654084800">- update to 2022-06-01:
  * switch to cxx_std_11 and other developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670155200">- update to 2022-12-01:
  * Update to Unicode 15.0.0 data
  * cmake install now installs the pkg-config file</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675512000">- update to 2023-02-01:
  * improved support for ICU
- build with ICU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678190400">- update to 2023-03-01:
  * changes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Require GCC 12 on Leap due to code containing speed ups which
  require newer standards
- Allow tests to fail - they fail too often</changelog>
</package>
<package pkgid="b2c657b11718636c1ef4b9dec03283f36c5743c46b1e82f9ea918a322b91e7d0" name="libre2-10-debuginfo" arch="aarch64">
  <version epoch="0" ver="20230301" rel="bp154.9.3.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604577600">- Update to version 2020-11-01:
  * Refactoring and fixes</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to version 2021-02-02:
  * Address `-Wnull-dereference' warnings from GCC 10.x.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618488000">- Update to 2021-04-01:
  * Make cached benchmarks actually use cached objects
  * Address some -Wmissing-field-initializers warnings
  * Make it easier to swap in a scalable reaer-writer mutex
  * In the shared library, set compatibility version and
    current version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623499200">- update to 2021-06-01:
  * Fix (|a)* matching more text than (|a)+
  * build system tweaks and developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1628251200">- update to 2021-08-01:
  * case-insensitive prefix acceleration</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to 2021-09-01:
  * Permit Unicode characters beyond ASCII in capture names</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1636113600">- Update to 2021-11-01:
  * Update Unicode data to 14.0.0
  * Address a `-Wshadow' warning</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1643976000">- Update to 2022-02-01:
  * Address a `-Wunused-but-set-variable' warning from Clang 13.x
  * Don't specify the -std flag in Makefile or re2.pc
  * Remove a redundant map access</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648814400">- Update to 2022-04-01:
  * Improve performance slightly
  * Prog::Fangout() is no longer experimental</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1650801600">- Switch build to CMake, otherwise CMake config is not installed.
  Required for Apache ORC and arrow, and google-or-tools.
  (https://github.com/google/re2/issues/304)
- Run some real tests via CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650974400">- Disable tests on ZSystems and RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651060800">- Disable tests on ARMv6</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651147200">- Avoid sporadic failures by setting until-pass on CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651406400">- Use Release config so O3 is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654084800">- update to 2022-06-01:
  * switch to cxx_std_11 and other developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670155200">- update to 2022-12-01:
  * Update to Unicode 15.0.0 data
  * cmake install now installs the pkg-config file</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675512000">- update to 2023-02-01:
  * improved support for ICU
- build with ICU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678190400">- update to 2023-03-01:
  * changes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Require GCC 12 on Leap due to code containing speed ups which
  require newer standards
- Allow tests to fail - they fail too often</changelog>
</package>
<package pkgid="6f84771205ac727fa2a9eb48df9f39a07b47c92947a0af0c778d4cd1d52a96d1" name="libre2-10-debuginfo" arch="i586">
  <version epoch="0" ver="20230301" rel="bp154.9.3.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604577600">- Update to version 2020-11-01:
  * Refactoring and fixes</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to version 2021-02-02:
  * Address `-Wnull-dereference' warnings from GCC 10.x.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618488000">- Update to 2021-04-01:
  * Make cached benchmarks actually use cached objects
  * Address some -Wmissing-field-initializers warnings
  * Make it easier to swap in a scalable reaer-writer mutex
  * In the shared library, set compatibility version and
    current version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623499200">- update to 2021-06-01:
  * Fix (|a)* matching more text than (|a)+
  * build system tweaks and developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1628251200">- update to 2021-08-01:
  * case-insensitive prefix acceleration</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to 2021-09-01:
  * Permit Unicode characters beyond ASCII in capture names</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1636113600">- Update to 2021-11-01:
  * Update Unicode data to 14.0.0
  * Address a `-Wshadow' warning</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1643976000">- Update to 2022-02-01:
  * Address a `-Wunused-but-set-variable' warning from Clang 13.x
  * Don't specify the -std flag in Makefile or re2.pc
  * Remove a redundant map access</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648814400">- Update to 2022-04-01:
  * Improve performance slightly
  * Prog::Fangout() is no longer experimental</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1650801600">- Switch build to CMake, otherwise CMake config is not installed.
  Required for Apache ORC and arrow, and google-or-tools.
  (https://github.com/google/re2/issues/304)
- Run some real tests via CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650974400">- Disable tests on ZSystems and RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651060800">- Disable tests on ARMv6</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651147200">- Avoid sporadic failures by setting until-pass on CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651406400">- Use Release config so O3 is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654084800">- update to 2022-06-01:
  * switch to cxx_std_11 and other developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670155200">- update to 2022-12-01:
  * Update to Unicode 15.0.0 data
  * cmake install now installs the pkg-config file</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675512000">- update to 2023-02-01:
  * improved support for ICU
- build with ICU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678190400">- update to 2023-03-01:
  * changes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Require GCC 12 on Leap due to code containing speed ups which
  require newer standards
- Allow tests to fail - they fail too often</changelog>
</package>
<package pkgid="9279c96de9785d4432a5ede7a2d2b17bccb660177069a4686f94474fbbf833d9" name="libre2-10-debuginfo" arch="ppc64le">
  <version epoch="0" ver="20230301" rel="bp154.9.3.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604577600">- Update to version 2020-11-01:
  * Refactoring and fixes</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to version 2021-02-02:
  * Address `-Wnull-dereference' warnings from GCC 10.x.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618488000">- Update to 2021-04-01:
  * Make cached benchmarks actually use cached objects
  * Address some -Wmissing-field-initializers warnings
  * Make it easier to swap in a scalable reaer-writer mutex
  * In the shared library, set compatibility version and
    current version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623499200">- update to 2021-06-01:
  * Fix (|a)* matching more text than (|a)+
  * build system tweaks and developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1628251200">- update to 2021-08-01:
  * case-insensitive prefix acceleration</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to 2021-09-01:
  * Permit Unicode characters beyond ASCII in capture names</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1636113600">- Update to 2021-11-01:
  * Update Unicode data to 14.0.0
  * Address a `-Wshadow' warning</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1643976000">- Update to 2022-02-01:
  * Address a `-Wunused-but-set-variable' warning from Clang 13.x
  * Don't specify the -std flag in Makefile or re2.pc
  * Remove a redundant map access</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648814400">- Update to 2022-04-01:
  * Improve performance slightly
  * Prog::Fangout() is no longer experimental</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1650801600">- Switch build to CMake, otherwise CMake config is not installed.
  Required for Apache ORC and arrow, and google-or-tools.
  (https://github.com/google/re2/issues/304)
- Run some real tests via CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650974400">- Disable tests on ZSystems and RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651060800">- Disable tests on ARMv6</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651147200">- Avoid sporadic failures by setting until-pass on CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651406400">- Use Release config so O3 is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654084800">- update to 2022-06-01:
  * switch to cxx_std_11 and other developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670155200">- update to 2022-12-01:
  * Update to Unicode 15.0.0 data
  * cmake install now installs the pkg-config file</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675512000">- update to 2023-02-01:
  * improved support for ICU
- build with ICU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678190400">- update to 2023-03-01:
  * changes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Require GCC 12 on Leap due to code containing speed ups which
  require newer standards
- Allow tests to fail - they fail too often</changelog>
</package>
<package pkgid="3f7a40d05eb573fa9a30b8f65a58f576ddbdbea809414435b2a36bfad8071fbd" name="libre2-10-debuginfo" arch="s390x">
  <version epoch="0" ver="20230301" rel="bp154.9.3.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604577600">- Update to version 2020-11-01:
  * Refactoring and fixes</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to version 2021-02-02:
  * Address `-Wnull-dereference' warnings from GCC 10.x.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618488000">- Update to 2021-04-01:
  * Make cached benchmarks actually use cached objects
  * Address some -Wmissing-field-initializers warnings
  * Make it easier to swap in a scalable reaer-writer mutex
  * In the shared library, set compatibility version and
    current version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623499200">- update to 2021-06-01:
  * Fix (|a)* matching more text than (|a)+
  * build system tweaks and developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1628251200">- update to 2021-08-01:
  * case-insensitive prefix acceleration</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to 2021-09-01:
  * Permit Unicode characters beyond ASCII in capture names</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1636113600">- Update to 2021-11-01:
  * Update Unicode data to 14.0.0
  * Address a `-Wshadow' warning</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1643976000">- Update to 2022-02-01:
  * Address a `-Wunused-but-set-variable' warning from Clang 13.x
  * Don't specify the -std flag in Makefile or re2.pc
  * Remove a redundant map access</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648814400">- Update to 2022-04-01:
  * Improve performance slightly
  * Prog::Fangout() is no longer experimental</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1650801600">- Switch build to CMake, otherwise CMake config is not installed.
  Required for Apache ORC and arrow, and google-or-tools.
  (https://github.com/google/re2/issues/304)
- Run some real tests via CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650974400">- Disable tests on ZSystems and RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651060800">- Disable tests on ARMv6</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651147200">- Avoid sporadic failures by setting until-pass on CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651406400">- Use Release config so O3 is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654084800">- update to 2022-06-01:
  * switch to cxx_std_11 and other developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670155200">- update to 2022-12-01:
  * Update to Unicode 15.0.0 data
  * cmake install now installs the pkg-config file</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675512000">- update to 2023-02-01:
  * improved support for ICU
- build with ICU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678190400">- update to 2023-03-01:
  * changes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Require GCC 12 on Leap due to code containing speed ups which
  require newer standards
- Allow tests to fail - they fail too often</changelog>
</package>
<package pkgid="4bf9e042a88912e77c653f466272dd36656b24960704e025b622514720251004" name="libre2-10-debuginfo" arch="x86_64">
  <version epoch="0" ver="20230301" rel="bp154.9.3.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604577600">- Update to version 2020-11-01:
  * Refactoring and fixes</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to version 2021-02-02:
  * Address `-Wnull-dereference' warnings from GCC 10.x.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618488000">- Update to 2021-04-01:
  * Make cached benchmarks actually use cached objects
  * Address some -Wmissing-field-initializers warnings
  * Make it easier to swap in a scalable reaer-writer mutex
  * In the shared library, set compatibility version and
    current version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623499200">- update to 2021-06-01:
  * Fix (|a)* matching more text than (|a)+
  * build system tweaks and developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1628251200">- update to 2021-08-01:
  * case-insensitive prefix acceleration</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to 2021-09-01:
  * Permit Unicode characters beyond ASCII in capture names</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1636113600">- Update to 2021-11-01:
  * Update Unicode data to 14.0.0
  * Address a `-Wshadow' warning</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1643976000">- Update to 2022-02-01:
  * Address a `-Wunused-but-set-variable' warning from Clang 13.x
  * Don't specify the -std flag in Makefile or re2.pc
  * Remove a redundant map access</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648814400">- Update to 2022-04-01:
  * Improve performance slightly
  * Prog::Fangout() is no longer experimental</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1650801600">- Switch build to CMake, otherwise CMake config is not installed.
  Required for Apache ORC and arrow, and google-or-tools.
  (https://github.com/google/re2/issues/304)
- Run some real tests via CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650974400">- Disable tests on ZSystems and RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651060800">- Disable tests on ARMv6</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651147200">- Avoid sporadic failures by setting until-pass on CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651406400">- Use Release config so O3 is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654084800">- update to 2022-06-01:
  * switch to cxx_std_11 and other developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670155200">- update to 2022-12-01:
  * Update to Unicode 15.0.0 data
  * cmake install now installs the pkg-config file</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675512000">- update to 2023-02-01:
  * improved support for ICU
- build with ICU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678190400">- update to 2023-03-01:
  * changes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Require GCC 12 on Leap due to code containing speed ups which
  require newer standards
- Allow tests to fail - they fail too often</changelog>
</package>
<package pkgid="f8e14d54a82cfce81f0dfe14f0fcc04894fa5d18833863e4e09c96f50982fd1a" name="librepo-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="202128d6138fc04726e25848d1bbb0c7096583943aa2a02832dd15e618d19bf7" name="librepo-debuginfo" arch="i586">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="da74fa7e33d98d4e2d29a5f8915c6fd3949f697bfd25dd69054bdcc700780287" name="librepo-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="bcbc5629a05fecac8d6e6c321bee09f8fbc2284369542dc0ef7915230737dfc2" name="librepo-debuginfo" arch="s390x">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="f809ef807e5e9ea5b95d657b25bfb843e87de613c9b2f7d6ec0391dea3133349" name="librepo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="aa4becdaff81b988e874173f27e3c11b402ce6397cb0bcc8789508dadde28074" name="librepo-debugsource" arch="aarch64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="a84a3109fcf79efecac5dbcc4e50c7e3b0a2e8865d8c71502ef8cbd828aba507" name="librepo-debugsource" arch="i586">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="0ff302c00881ee489a2056391c43969de512fb8675e952607a2f7aa996705c6e" name="librepo-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="d2e9781caa15e213642d9765f823ab84549e9d88342640865c6f09625031efae" name="librepo-debugsource" arch="s390x">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="90e3c45c0984547daeea1e45d9f80b9debab605598f58562740443b8e9dd701d" name="librepo-debugsource" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="81e14cf8116e4ca16430cfde9874c6fd77172df3891d3dd93587dfa57b2c60d7" name="librepo0-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="1ecfde742f04fd123a1ec4a16b5d23e09ce2a5561fe4c0bc6d81f6d3f6092e34" name="librepo0-debuginfo" arch="i586">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="dcc62f68984bc17eca506480a432bd4cef12ecb99b722c4caedc0ebc21366a5b" name="librepo0-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="f28ce986d40153851c69cb45259086ec149a963e7f6c0df0cd39381879060e6c" name="librepo0-debuginfo" arch="s390x">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="c880d04b4e0490bffee643b78f95fc765b6b4a8f4d5768197af3a3dd1bdab68e" name="librepo0-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="8a1402d7057b96ad1f8ac01e7b91ccf44856ef8c58df4d03d29bd44d75951f16" name="libsocketxx1_2-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="b7f5240762fccaddf8f73d34a55763b24f5198398cc7e9de16522e863c0cf1c4" name="libsocketxx1_2-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="a45d3eb67dd2f6f8b21a7b0cde5697255c010d7bb9eda3003678b8dd76571745" name="libsocketxx1_2-debuginfo" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="13cb5a2ad786deec1df02261f74566e981e481adfa8350b826472a77d9167304" name="libsocketxx1_2-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="43697e5c00d1223aa91aac7d4a26b2176caab63e7b79ba895021c71bee1ece53" name="liferea-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414497600">- Update to version 1.10.12 (boo#906687):
  + Fix gh#lwindolf/liferea#86: Support HTTP content negotiation
  + Fix gh#lwindolf/liferea#98: Stop calling Atom person
    constructs w/ URI invalid
  + Fix gh#lwindolf/liferea#100: Problems with dark Adwaita theme
    in GTK 3.14
- Changes from versions 1.10.6 through 1.10.11:
  + See ChangeLog file
    (/usr/share/doc/packages/liferea/ChangeLog).</changelog>
  <changelog author="badshah400@gmail.com" date="1425211200">- Update to version 1.10.14 (boo#916784):
  + Fix gh#lwindolf/liferea#154: Crashes while starting (on
    corrupt icon).
  + Fix gh#lwindolf/liferea#134: Broken default news feed.
  + Fix gh#lwindolf/liferea#122: Crashes at launch,
    "segmentation fault".
  + Fix some memory leaks.
  + Fix gh#lwindolf/liferea#145: Wrong method triggered on
    'Launch External'.
  + Fix gh#lwindolf/liferea#149: Fixes a random crash on startup.
- Changes from version 1.10.13:
  + Fix gh#lwindolf/liferea#112: Wrapping issue in folder display.
  + Fix gh#lwindolf/liferea#114: Avoid termination on UTF-8
    validation error.
  + Fix gh#lwindolf/liferea#132: Broken link in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455969600">- Update to version 1.10.18:
  + Fix gh#lwindolf/liferea#287: media:content support broken.
  + Fix gh#lwindolf/liferea#279: Rules not visible in searchdialog.
  + Fix gh#lwindolf/liferea#83: Segfault when sorting feeds in
    folder.
  + Fix gh#lwindolf/liferea#302: Broken compilation with
  - -disable-notify.
- Changes from version 1.10.17:
  + Fix gh#lwindolf/liferea#194: Add source dialog visually broken.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on
    enclosure download.
  + Fix gh#lwindolf/liferea#223: Search folder dialog don't show
    rules.
  + Fix gh#lwindolf/liferea#227: Preference dialog fails to load
    with latest GtkBuilder.
  + Fix gh#lwindolf/liferea#234: Segmentation fault upon attempting
    to add an OPML.
  + Fix compilation error when there is no libnotify.
  + Added debugging for gh#lwindolf/liferea#258: Dialog loading
    issues.
- Changes from version 1.10.16:
  + Added "Do Not Track" support (enabled per default).
  + Added x-scheme-handler/feed to desktop file.
  + Add image icons to plugins.
  + Enable tests for parsing RFC822 dates with 2 digit year.
  + Fix gh#lwindolf/liferea#78: Shaky text in feed list.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on enclose
    download.
  + Fix gh#lwindolf/liferea#198: Traceback on popup notifications.
  + Fix gh#lwindolf/liferea#216: Untranslatable strings.
  + Fix gh#lwindolf/liferea#256: PyGIWarnings on loading plugins.
- Changes from version 1.10.15:
  + Implement full screen mode for videos.
  + Fix gh#lwindolf/liferea#32: Prevent erroneous "Mark all as
    read".
  + Improves gh#lwindolf/liferea#36, gh#lwindolf/liferea#113: UI
    lock up during refresh.
  + Fix gh#lwindolf/liferea#180: Removing item from (v)folder marks
    all read.
  + Fix gh#lwindolf/liferea#140, #158: Vertical pane placement is
    forgotten.
  + Fix gh#lwindolf/liferea#182: Missing config.h include in
    date.c.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 1.10.19:
  + Fixes gh#lwindolf/liferea#317: Compilation problems in 1.10.18
    release.
  + Fixes gh#lwindolf/liferea#73: Problem with updating favicons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 1.11.7:
  + Add support for media:group.
  + Fix issues with media:content.
  + Bad .desktop categories definition.
  + Fix rules no visible in searchdialog.
  + "Download" tab in Tools/Preferences.
  + Segfault when sorting feeds in folder.
  + Updated manpage.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.12~rc3:
  + Fix GtkDoc warnings.
  + Filter commands are not asynchronous.
  + Missing space above internal browser address bar.
  + All "Unread" search folder items marked read at once.
  + Liferea does not always use theme icons when it is launched on
    system startup.
  + Updated translations.
- Changes from version 1.12~rc2:
  + Change all g_warnings() to g_print() for remote source to avoid
    "crashing" on errors.
  + Reorganized all UI definitions in separate files to simplify
    GtkBuilder handling.
  + Add GeoRSS info and map link in item header.
  + Replacing deprecated elements in preferences.
  + Create LifereaApplication type.
  + Partial RFC3229+feed support for bandwidth savings.
  + gtk_tree_store_get_path: assertion
    'iter-&gt;stamp == priv-&gt;stamp'.
  + Leftover OSM XSLT in item view.
  + Internal browser shows files system on go-back.
  + Updated translations.
- Changes from version 1.12~rc1:
  + Switch to webkit2gtk3.
  + Support for Do-Not-Track.
  + Improved trayicon plugin.
  + Support for Reedah and InoReader.
  + Support for categories in TheOldReader.
  + Simplified handling of external browsers.
- Replace pkgconfig(webkitgtk-3.0) with pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Change license to 'GPL-2.0' in place of 'GPL-2.0+':
  src/debug.[c|h]) does not specify 'or higher'.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Update to version 1.12.1:
  + Fix Lintian spelling errors.
  + Appstream data has new format.
  + Fix doesn't remember some sort orders.
  + Fix assertions/crashes on changing view layouts.
  + Workaround to avoid GtkPaned shrinking.
  + Updated translations.
- Changes from version 1.12.0:
  + Fixes unhiding from tray icon when activated via GApplication.
  + Reorder columns in 'Normal' email-like view to have the date
    column always at the end.
  + Add plugin to make unread feeds titles bold.
  + Workaround Liferea deanonymize Tor.
  + Resize both panes in normal and wide view.
  + Toggle_visibility() does not make a minimized window visible
    again.
  + Segfault when switching feed in combined view.
  + Handling of relative URLs in Atom parser.
  + Added 'View Image' context menu option in HTML view.
  + Dropped del.icio.us from social bookmarking options as it is a
    read-only service now.
  + Redesign of the wide view mode: larger titles with small text
    teasers.
  + Added optional AMP/HTML5 content enrichment feature.
  + Updated translations.
- Conditionalize handling of desktop_database_post(un),
  icon_theme_cache_post(un) and glib2_gsettings_schema_postun in
  post(un) to only apply for old versions of openSUSE.
- Clean up spec, drop obsolete clean section.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568289600">- Update to version 1.12.6:
  * #658: Add confirmation dialog when adding duplicate subscription
  * Fixes #689: When resuming from sleep feeds were being fetched
    before Wifi came up
  * Fixes #685: Headerbar plugin "Mark All Read" button is not
    feed-specific
  * Fixes #549: Scrollbars not always present in the headline area
  * Fixes #543: Next update overrides HTML5 enrichment
  * Fixes overly wide label in enclosure preferences dialog
  * Dropped unencrypted warning from auth dialog (not true anymore)
  * #688: Adding translatable tooltips for the headerbar plugin
  * #665: Webkit browser now supplies 'Liferea' component in
    user agent
  * #664: Added "Mark All As Read" button to headerbar plugin
  * #620: Added flatpak JSON
  * #579: Added item list column drag and drop reordering
  * #436, #662: Move from GnomeKeyring to libsecret
  * Fixes #663: Correct instapaper sharing link
  * Fixes #661: Update sharing links
  * Fixes #271: Consistent over usage of CPU (trigger by
    "Next Unread" loop)
  * #472, #632: Dropping Inoreader support (API broke)
  * Fixes #660: Added installable plugin to change accels
  * Fixes #654: Segfault on date out of range
  * Fixes #651: Fixes Free Music Archive link in default OPMLs
  * Fixes #649: Switch from persistent to session-only cookies
  * Fixes #645, #646: unread count of vfolder
  * Fixes #637: Extra keywords in .desktop file
    (syndication; rss; atom)
  * Fixes #557: Updating counters for remote sources
  * Updated cookie usage hint in FAQ
  * #634: Added setting for custom download commands
  * #614: GTK Headerbar support via plugin
  * #608: Refactoring UI code to switch to GAction and GtkBuilder
  * Note: this implies not having icons in the main menu anymore
  * which were still there for all non-GNOME users (see #626).
  * #589: Item list view column order rework as a preparation
    for possible real column drag&amp;drop. Introduces a new
    DConf setting for the column order.
  * Fixes #280: Mark read toolbar button always disabled for
    search folders
  * Fixes #591: Please add a safety question when
    "marking all read"
  * Fixes #625: Avoid exception in trayicon.py
  * Fixes #627: GnomeKeyring plugin fails to activate when
    keyring doesn't exist
  * Fixes #630: Fix feed list selection after DnD
  * Fixes #633: Big Memory leak in date code
  * Adding a plugin installer plugin that allows discovering
    and automatically installing 3rd party plugins
  * #585: Drop language from user agent to increase privacy
  * #583: Add transmission-gtk and aria2 as download tool options
  * #495: New command line option --disable-plugins (-p) to start
    with all plugins disabled.
  * Fixes #610: Liferea not showing up in GNOME Software
  * Fixes #604: Correctly print error message when failing to
    unlock GNOME keyring
  * Fixes #602: CSS style for GTK link colors not used
  * Fixes #581: Redirect location updates and adds HTTP 308
    (RFC 7538) support
  * Fixes #578: Unable to set unread items in bold
  * #584: Fixes broken OPML feed list entries
  * #577: Fixes newsbin doc typo
  * #584: Added Norwegian feed list
  * Translation updates
- rebase liferea-openSUSE-feeds.patch
- fixes boo#1150009</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1578916800">- Add export WEBKIT_DISABLE_COMPOSITING_MODE=1 as workaround for
  Factory build failure
  (https://github.com/lwindolf/liferea/issues/767)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1589457600">- Export WEBKIT_DISABLE_COMPOSITING_MODE=1 on Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1591963200">- Update to version 1.12.8:
  * Fixes #734: crash when selecting empty nodes
  * Fixes #727: Out-dated documentation on Firefox live bookmarks
  * Fixes headline large images/videos or images with margins
    causing horizontal scrolling in headline view
  * Fixes #840: OPML source subfolders not working
  * Update of French translation</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to version 1.12.9:
  * Fix embedded youtube video bug
  * Fix translations not applied to application menu bar and tool bar</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1620475200">- Update to version 1.13.6:
  * Change reader mode toggle from item view icon to toggle entry in item view context menu.
  * #343: UX redesign of the update message in the status bar. Now shows a update counter of the feeds being in update.
  * #964: Added pane position fix plugin providing a workaround for pane position issues when using the headerbar
  * #983: Use GtkFileChooserNative to allow selecting local files when run in sandbox.
  * Fixes #780: Improve date formatting when in locale en_GB
  * Fixes #944: Broken RTL text direction in feed content view
  * Fixes #949: Regression in notification plugin that caused it to show non-new items
  * Fixes #963: Checking for git command in plugin installer -&gt; warn user
  * Fixes #973: Broken CSS in Webkit2Gtk &gt;= 2.32
  * Updated Albanian translation
  * Updated French translation
  * Updated Italian translation
  * Updated German translation
  * #907: Add new search folder property that allows hiding read items
  * Now always shows the unread count of a search folder (instead of the item count) in the feed list
  * Now search folders are automatically rebuild when rules are changed
  * Adds a new simple focus plugin that adds transparency on the feed list when it is not focussed.
  * Add F10 hotkey to headerbar plugin to allow triggering the hamburger menu
  * Update Flatpak AppData with release dates
  * Make several plugins support gettext
  * Fixes #192: wrong button order of media player in RTL locales
  * Fixes #343: Usability of update infos in status bar. Now a total count is displayed on mass-updates and a per-feed info on single feed updates
  * Fixes #809: Usability of feed fetching errors.
  * Updated Polish translation
  * Updated German translation
  * Prevent endless loop on favicon discovery
  * #903: Prevent endless loop in feed autodiscovery
  * #912: Allow mutiple feed in same libnotify notification
  * Further favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons Fixes #440
  * Add reader mode toggle in the item view
  * #876 Add reader mode preference
  * Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings
  * Provide the default icon for feeds with no favicon as SVG for nicer rendering in wide view. Drop some unused icons. Replace tray icon with scalable version.
  * Fixes CRITICAL on trayicon plugin init
  * Fixes #884: Content of wrong feed is shown
  * Fixes #900: Flatpak needs icon named after appid
  * Fixes #908, #332: Search folder are not case-insensitive as documented
  * Fixes #899: Truncated articles (on 'Extrat full content')
  * #902: Updated Polish translation
  * #893: Update of bookmarking sites
  * #888: Changes required for Flathub
  * #882: Implement support for Webkits Intelligent Tracking Protection
  * #875: Add &lt;Ctrl&gt;-0 hotkey to reset zoom
  * #874: Add debug printing of SAX parser errors
  * #846: Remove deprecated usage of gdk_screen_*
  * #844: Update metainfo path (appdata target directory)
  * #776: CSS color update on theme change without restart
  * Fixes #883: Feed with comments: last comment replaces all content
  * Fixes #866: Bad encoding in doc/html/reference_de.html
  * Fixes #865: Fixes view mode switch
  * Fixes #841: Now shows progress bar when loading websites
  * Fixes #828: Crashing with segfault after opening feed articles
  * Fixes XLST exception on mediarss feeds with description
  * Drop blogChannel namespace support
  * Support multi-feed discovery
  * Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed
  * Drop CDF channel legacy support
  * Drop Atom 0.2/0.3 (aka Pie) legacy support
  * #893: Added Persion default feed list
  * #890: Update of Indionesian translation
  * #890: Update of French translation
  * #846, #864, #735: Fix main menu/toolbar not being translated
  * #854: Adding new search folder options to match subscription source ULR and parent folder name.
  * #851: Add accessibility check to code tests
  * #851: Fix accessibility annotations for several combo boxes.
  * #850: Fix embedded youtube video bug.
  * #765: Embed YouTube videos from MediaRSS feeds
  * #749: Add Readability.js library (Apache 2.0 licensed) and auto-apply Readability.js to all headlines
  * Drop unused glade/google_source.ui
  * Drop support of combined view mode, this is necessary to add rich content support which relies on DOM transformation and Readability.js
  * Drop ns_photo support, as it is rarely used and allows us to get rid of XSLT extra handling
  * #747: Font improvements
  * #250 Update some dialog labels
  * #803: Fix legacy links to mailing list and IRC in documentation.
  * Updated German translation
  * #861: Updated Spanish translation
  * Fixes #840: OPML source subfolders not working
  * #837: Removing GTimeVal references
  * #827: Respect global update refresh interval for TheOldReader
  * #826: Fix save/restore position issues with tray icon
  * #822: Improve performance of item list loading
  * Fixes #821: Skip current item when finding next unread item
  * #815: Add support for subscribing to HTML5 websites without RSS/Atom feeds by extracting article titles,links and descriptions
  * #816: Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view. Also add favicon URL discovery tests.
  * Fixes #821: Skip current selected unread item on 'next unread item'
  * #800: Expose remove-item action for plugins
  * Fixes #799: plugins/headerbar.py translations not active
  * Fixes #783: Update IS_STATE when update item in itemlistview
  * #752: Trayicon plugin has now a configuration option to change the behaviour when closing Liferea.
  * Fixes #693: Add trayicon plugin option to disable minimizing to tray
  * #764: Add MediaRSS support (e.g. Youtube feeds) to display descriptions and thumbnails
  * #773: Add WebKit Inspector menu option to HTML view when run with --debug-html (by sillyslux)
  * #714: Replaces deprecated gtk_menu_popup
  * #705: New hotkey Ctrl-O to open enclosures
  * #680: Add xdg-email command to item list popup menu
  * Drop unused glade/google_source.ui
  * #699: Refactoring of duplicate check handlingg
  * #746: Fix accessibility fatals reported by gla11y
  * Fixes #730: "Update all subscriptions at startup" overrides "Don't update this feed automatically"
  * Fixes #639: Right clicking on article no longer selects it
  * #737: Update of Italian translation
  * #745: URL fix for French example feeds
  * Update inline docs on headline view modes</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1626177600">- Fix missing python3-gobject-Gdk runtime dependency (boo#1187936)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1642075200">- Require python3-cairo; needed for tray icon (boo#1193579).</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1673784000">- Update to version 1.14.0
  + New 'Reader mode' preference that allows stripping all web
    content
  + Implement support for Webkits Intelligent Tracking Protection
  + New progress bar when loading websites
  + Youtube videos from media:video can be embedded now with a
    click on the video preview picture.
  + Changes to UserAgent handling: same UA is now used for both
    feed fetching and internal browsing.
  + New view mode 'Automatic' which switches between 'Normal' and
    'Wide' mode based on the window proportions.
  + Liferea now supports the new GTK dark theme logic, where in
    the GTK/GNOME preferences you define wether you "prefer" dark
    mode or light mode
  + Favicon discovery improvements: now detects all types of Apple
    Touch Icons, MS Tile Images and Safari Mask Icons
  + Increase size of stored favicons to 128x128px to improve icon
    quality in 3-pane wide view.
  + Make several plugins support gettext
  + Allow mutiple feed in same libnotify notification
  + Redesign of the update message in the status bar. It now shows
    a update counter of the feeds being in update.
  + You can now export a feed to XML file
  + Added an option to show news bins in reduced feed list
  + Added menu option to send item per mail
  + Default to https:// instead of http:// when user doesn't
    provide protocol on subscribing feed
  + Implement support for subscribing to LD+Json metadata listings
    e.g. concert or theater event listings
  + Implement support for subscribing to HTML5 websites
  + Support for media:description field of Youtube feeds
  + Improve HTML5 extraction: extract main tag if it exists and
    no article was found.
  + Execute feed pipe/filter commands asynchronously
  + Better explanation of feed update errors.
  + Added generic Google Reader API support (allows using FeedHQ,
    FreshRSS, Miniflux...)
  + Now allow converting TinyTinyRSS subscriptions to
    local subscriptions
  + New search folder rule to match podcasts
  + New search folder rule to match headline authors
  + New search folder rule to match subscription source
  + New search folder rule to match parent folder name
  + New search folder property that allows hiding read items
  + Now search folders are automatically rebuild when rules are
    changed
  + Added new plugin 'add-bookmark-site' that allows to configure
    a custom bookmarking site.
  + Added new plugin 'getfocus' that adds transparency on the feed
    list when it is not focussed.
  + Trayicon plugin has now a configuration option to change the
    behaviour when closing Liferea.
  + Trayicon plugin has now an option to disable minimizing to tray
  + New hot key Ctrl-D for 'Open in External Browser'
  + New hot key F10 for headerbar plugin to allow triggering the
    hamburger menu
  + New hot key Ctrl-0 to reset zoom
  + New hot key Ctrl-O to open enclosures
  + Fix hidden panes, Liferea will never allow the panes to be
    smaller than 5% in height or width
  + Wait for network to be fully available before updating
  + 2-pane mode was removed
  + Dropped CDF channel support
  + Dropped Atom 0.2/0.3 (aka Pie) support
  + Dropped blogChannel namespace support
  + Dropped photo namespace support
- Add libtool BuildRequires and run autogen.sh: the tarball is an
  unbootstrapped git archive.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674216000">- Use the properly boostrapped release tarball from upstream.
- Drop libtool BuildRequires and no longer run autogen.sh.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1678708800">- Update to version 1.14.1:
  + Fix CVE-2023-1350 - Remote code execution on feed enrichment
    (boo#1209190).</changelog>
</package>
<package pkgid="0d2fcd962d965ba5c2212898f0435d7641a85a9c51c60c132da9f25ef324db23" name="liferea-debuginfo" arch="i586">
  <version epoch="0" ver="1.14.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414497600">- Update to version 1.10.12 (boo#906687):
  + Fix gh#lwindolf/liferea#86: Support HTTP content negotiation
  + Fix gh#lwindolf/liferea#98: Stop calling Atom person
    constructs w/ URI invalid
  + Fix gh#lwindolf/liferea#100: Problems with dark Adwaita theme
    in GTK 3.14
- Changes from versions 1.10.6 through 1.10.11:
  + See ChangeLog file
    (/usr/share/doc/packages/liferea/ChangeLog).</changelog>
  <changelog author="badshah400@gmail.com" date="1425211200">- Update to version 1.10.14 (boo#916784):
  + Fix gh#lwindolf/liferea#154: Crashes while starting (on
    corrupt icon).
  + Fix gh#lwindolf/liferea#134: Broken default news feed.
  + Fix gh#lwindolf/liferea#122: Crashes at launch,
    "segmentation fault".
  + Fix some memory leaks.
  + Fix gh#lwindolf/liferea#145: Wrong method triggered on
    'Launch External'.
  + Fix gh#lwindolf/liferea#149: Fixes a random crash on startup.
- Changes from version 1.10.13:
  + Fix gh#lwindolf/liferea#112: Wrapping issue in folder display.
  + Fix gh#lwindolf/liferea#114: Avoid termination on UTF-8
    validation error.
  + Fix gh#lwindolf/liferea#132: Broken link in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455969600">- Update to version 1.10.18:
  + Fix gh#lwindolf/liferea#287: media:content support broken.
  + Fix gh#lwindolf/liferea#279: Rules not visible in searchdialog.
  + Fix gh#lwindolf/liferea#83: Segfault when sorting feeds in
    folder.
  + Fix gh#lwindolf/liferea#302: Broken compilation with
  - -disable-notify.
- Changes from version 1.10.17:
  + Fix gh#lwindolf/liferea#194: Add source dialog visually broken.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on
    enclosure download.
  + Fix gh#lwindolf/liferea#223: Search folder dialog don't show
    rules.
  + Fix gh#lwindolf/liferea#227: Preference dialog fails to load
    with latest GtkBuilder.
  + Fix gh#lwindolf/liferea#234: Segmentation fault upon attempting
    to add an OPML.
  + Fix compilation error when there is no libnotify.
  + Added debugging for gh#lwindolf/liferea#258: Dialog loading
    issues.
- Changes from version 1.10.16:
  + Added "Do Not Track" support (enabled per default).
  + Added x-scheme-handler/feed to desktop file.
  + Add image icons to plugins.
  + Enable tests for parsing RFC822 dates with 2 digit year.
  + Fix gh#lwindolf/liferea#78: Shaky text in feed list.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on enclose
    download.
  + Fix gh#lwindolf/liferea#198: Traceback on popup notifications.
  + Fix gh#lwindolf/liferea#216: Untranslatable strings.
  + Fix gh#lwindolf/liferea#256: PyGIWarnings on loading plugins.
- Changes from version 1.10.15:
  + Implement full screen mode for videos.
  + Fix gh#lwindolf/liferea#32: Prevent erroneous "Mark all as
    read".
  + Improves gh#lwindolf/liferea#36, gh#lwindolf/liferea#113: UI
    lock up during refresh.
  + Fix gh#lwindolf/liferea#180: Removing item from (v)folder marks
    all read.
  + Fix gh#lwindolf/liferea#140, #158: Vertical pane placement is
    forgotten.
  + Fix gh#lwindolf/liferea#182: Missing config.h include in
    date.c.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 1.10.19:
  + Fixes gh#lwindolf/liferea#317: Compilation problems in 1.10.18
    release.
  + Fixes gh#lwindolf/liferea#73: Problem with updating favicons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 1.11.7:
  + Add support for media:group.
  + Fix issues with media:content.
  + Bad .desktop categories definition.
  + Fix rules no visible in searchdialog.
  + "Download" tab in Tools/Preferences.
  + Segfault when sorting feeds in folder.
  + Updated manpage.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.12~rc3:
  + Fix GtkDoc warnings.
  + Filter commands are not asynchronous.
  + Missing space above internal browser address bar.
  + All "Unread" search folder items marked read at once.
  + Liferea does not always use theme icons when it is launched on
    system startup.
  + Updated translations.
- Changes from version 1.12~rc2:
  + Change all g_warnings() to g_print() for remote source to avoid
    "crashing" on errors.
  + Reorganized all UI definitions in separate files to simplify
    GtkBuilder handling.
  + Add GeoRSS info and map link in item header.
  + Replacing deprecated elements in preferences.
  + Create LifereaApplication type.
  + Partial RFC3229+feed support for bandwidth savings.
  + gtk_tree_store_get_path: assertion
    'iter-&gt;stamp == priv-&gt;stamp'.
  + Leftover OSM XSLT in item view.
  + Internal browser shows files system on go-back.
  + Updated translations.
- Changes from version 1.12~rc1:
  + Switch to webkit2gtk3.
  + Support for Do-Not-Track.
  + Improved trayicon plugin.
  + Support for Reedah and InoReader.
  + Support for categories in TheOldReader.
  + Simplified handling of external browsers.
- Replace pkgconfig(webkitgtk-3.0) with pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Change license to 'GPL-2.0' in place of 'GPL-2.0+':
  src/debug.[c|h]) does not specify 'or higher'.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Update to version 1.12.1:
  + Fix Lintian spelling errors.
  + Appstream data has new format.
  + Fix doesn't remember some sort orders.
  + Fix assertions/crashes on changing view layouts.
  + Workaround to avoid GtkPaned shrinking.
  + Updated translations.
- Changes from version 1.12.0:
  + Fixes unhiding from tray icon when activated via GApplication.
  + Reorder columns in 'Normal' email-like view to have the date
    column always at the end.
  + Add plugin to make unread feeds titles bold.
  + Workaround Liferea deanonymize Tor.
  + Resize both panes in normal and wide view.
  + Toggle_visibility() does not make a minimized window visible
    again.
  + Segfault when switching feed in combined view.
  + Handling of relative URLs in Atom parser.
  + Added 'View Image' context menu option in HTML view.
  + Dropped del.icio.us from social bookmarking options as it is a
    read-only service now.
  + Redesign of the wide view mode: larger titles with small text
    teasers.
  + Added optional AMP/HTML5 content enrichment feature.
  + Updated translations.
- Conditionalize handling of desktop_database_post(un),
  icon_theme_cache_post(un) and glib2_gsettings_schema_postun in
  post(un) to only apply for old versions of openSUSE.
- Clean up spec, drop obsolete clean section.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568289600">- Update to version 1.12.6:
  * #658: Add confirmation dialog when adding duplicate subscription
  * Fixes #689: When resuming from sleep feeds were being fetched
    before Wifi came up
  * Fixes #685: Headerbar plugin "Mark All Read" button is not
    feed-specific
  * Fixes #549: Scrollbars not always present in the headline area
  * Fixes #543: Next update overrides HTML5 enrichment
  * Fixes overly wide label in enclosure preferences dialog
  * Dropped unencrypted warning from auth dialog (not true anymore)
  * #688: Adding translatable tooltips for the headerbar plugin
  * #665: Webkit browser now supplies 'Liferea' component in
    user agent
  * #664: Added "Mark All As Read" button to headerbar plugin
  * #620: Added flatpak JSON
  * #579: Added item list column drag and drop reordering
  * #436, #662: Move from GnomeKeyring to libsecret
  * Fixes #663: Correct instapaper sharing link
  * Fixes #661: Update sharing links
  * Fixes #271: Consistent over usage of CPU (trigger by
    "Next Unread" loop)
  * #472, #632: Dropping Inoreader support (API broke)
  * Fixes #660: Added installable plugin to change accels
  * Fixes #654: Segfault on date out of range
  * Fixes #651: Fixes Free Music Archive link in default OPMLs
  * Fixes #649: Switch from persistent to session-only cookies
  * Fixes #645, #646: unread count of vfolder
  * Fixes #637: Extra keywords in .desktop file
    (syndication; rss; atom)
  * Fixes #557: Updating counters for remote sources
  * Updated cookie usage hint in FAQ
  * #634: Added setting for custom download commands
  * #614: GTK Headerbar support via plugin
  * #608: Refactoring UI code to switch to GAction and GtkBuilder
  * Note: this implies not having icons in the main menu anymore
  * which were still there for all non-GNOME users (see #626).
  * #589: Item list view column order rework as a preparation
    for possible real column drag&amp;drop. Introduces a new
    DConf setting for the column order.
  * Fixes #280: Mark read toolbar button always disabled for
    search folders
  * Fixes #591: Please add a safety question when
    "marking all read"
  * Fixes #625: Avoid exception in trayicon.py
  * Fixes #627: GnomeKeyring plugin fails to activate when
    keyring doesn't exist
  * Fixes #630: Fix feed list selection after DnD
  * Fixes #633: Big Memory leak in date code
  * Adding a plugin installer plugin that allows discovering
    and automatically installing 3rd party plugins
  * #585: Drop language from user agent to increase privacy
  * #583: Add transmission-gtk and aria2 as download tool options
  * #495: New command line option --disable-plugins (-p) to start
    with all plugins disabled.
  * Fixes #610: Liferea not showing up in GNOME Software
  * Fixes #604: Correctly print error message when failing to
    unlock GNOME keyring
  * Fixes #602: CSS style for GTK link colors not used
  * Fixes #581: Redirect location updates and adds HTTP 308
    (RFC 7538) support
  * Fixes #578: Unable to set unread items in bold
  * #584: Fixes broken OPML feed list entries
  * #577: Fixes newsbin doc typo
  * #584: Added Norwegian feed list
  * Translation updates
- rebase liferea-openSUSE-feeds.patch
- fixes boo#1150009</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1578916800">- Add export WEBKIT_DISABLE_COMPOSITING_MODE=1 as workaround for
  Factory build failure
  (https://github.com/lwindolf/liferea/issues/767)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1589457600">- Export WEBKIT_DISABLE_COMPOSITING_MODE=1 on Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1591963200">- Update to version 1.12.8:
  * Fixes #734: crash when selecting empty nodes
  * Fixes #727: Out-dated documentation on Firefox live bookmarks
  * Fixes headline large images/videos or images with margins
    causing horizontal scrolling in headline view
  * Fixes #840: OPML source subfolders not working
  * Update of French translation</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to version 1.12.9:
  * Fix embedded youtube video bug
  * Fix translations not applied to application menu bar and tool bar</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1620475200">- Update to version 1.13.6:
  * Change reader mode toggle from item view icon to toggle entry in item view context menu.
  * #343: UX redesign of the update message in the status bar. Now shows a update counter of the feeds being in update.
  * #964: Added pane position fix plugin providing a workaround for pane position issues when using the headerbar
  * #983: Use GtkFileChooserNative to allow selecting local files when run in sandbox.
  * Fixes #780: Improve date formatting when in locale en_GB
  * Fixes #944: Broken RTL text direction in feed content view
  * Fixes #949: Regression in notification plugin that caused it to show non-new items
  * Fixes #963: Checking for git command in plugin installer -&gt; warn user
  * Fixes #973: Broken CSS in Webkit2Gtk &gt;= 2.32
  * Updated Albanian translation
  * Updated French translation
  * Updated Italian translation
  * Updated German translation
  * #907: Add new search folder property that allows hiding read items
  * Now always shows the unread count of a search folder (instead of the item count) in the feed list
  * Now search folders are automatically rebuild when rules are changed
  * Adds a new simple focus plugin that adds transparency on the feed list when it is not focussed.
  * Add F10 hotkey to headerbar plugin to allow triggering the hamburger menu
  * Update Flatpak AppData with release dates
  * Make several plugins support gettext
  * Fixes #192: wrong button order of media player in RTL locales
  * Fixes #343: Usability of update infos in status bar. Now a total count is displayed on mass-updates and a per-feed info on single feed updates
  * Fixes #809: Usability of feed fetching errors.
  * Updated Polish translation
  * Updated German translation
  * Prevent endless loop on favicon discovery
  * #903: Prevent endless loop in feed autodiscovery
  * #912: Allow mutiple feed in same libnotify notification
  * Further favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons Fixes #440
  * Add reader mode toggle in the item view
  * #876 Add reader mode preference
  * Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings
  * Provide the default icon for feeds with no favicon as SVG for nicer rendering in wide view. Drop some unused icons. Replace tray icon with scalable version.
  * Fixes CRITICAL on trayicon plugin init
  * Fixes #884: Content of wrong feed is shown
  * Fixes #900: Flatpak needs icon named after appid
  * Fixes #908, #332: Search folder are not case-insensitive as documented
  * Fixes #899: Truncated articles (on 'Extrat full content')
  * #902: Updated Polish translation
  * #893: Update of bookmarking sites
  * #888: Changes required for Flathub
  * #882: Implement support for Webkits Intelligent Tracking Protection
  * #875: Add &lt;Ctrl&gt;-0 hotkey to reset zoom
  * #874: Add debug printing of SAX parser errors
  * #846: Remove deprecated usage of gdk_screen_*
  * #844: Update metainfo path (appdata target directory)
  * #776: CSS color update on theme change without restart
  * Fixes #883: Feed with comments: last comment replaces all content
  * Fixes #866: Bad encoding in doc/html/reference_de.html
  * Fixes #865: Fixes view mode switch
  * Fixes #841: Now shows progress bar when loading websites
  * Fixes #828: Crashing with segfault after opening feed articles
  * Fixes XLST exception on mediarss feeds with description
  * Drop blogChannel namespace support
  * Support multi-feed discovery
  * Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed
  * Drop CDF channel legacy support
  * Drop Atom 0.2/0.3 (aka Pie) legacy support
  * #893: Added Persion default feed list
  * #890: Update of Indionesian translation
  * #890: Update of French translation
  * #846, #864, #735: Fix main menu/toolbar not being translated
  * #854: Adding new search folder options to match subscription source ULR and parent folder name.
  * #851: Add accessibility check to code tests
  * #851: Fix accessibility annotations for several combo boxes.
  * #850: Fix embedded youtube video bug.
  * #765: Embed YouTube videos from MediaRSS feeds
  * #749: Add Readability.js library (Apache 2.0 licensed) and auto-apply Readability.js to all headlines
  * Drop unused glade/google_source.ui
  * Drop support of combined view mode, this is necessary to add rich content support which relies on DOM transformation and Readability.js
  * Drop ns_photo support, as it is rarely used and allows us to get rid of XSLT extra handling
  * #747: Font improvements
  * #250 Update some dialog labels
  * #803: Fix legacy links to mailing list and IRC in documentation.
  * Updated German translation
  * #861: Updated Spanish translation
  * Fixes #840: OPML source subfolders not working
  * #837: Removing GTimeVal references
  * #827: Respect global update refresh interval for TheOldReader
  * #826: Fix save/restore position issues with tray icon
  * #822: Improve performance of item list loading
  * Fixes #821: Skip current item when finding next unread item
  * #815: Add support for subscribing to HTML5 websites without RSS/Atom feeds by extracting article titles,links and descriptions
  * #816: Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view. Also add favicon URL discovery tests.
  * Fixes #821: Skip current selected unread item on 'next unread item'
  * #800: Expose remove-item action for plugins
  * Fixes #799: plugins/headerbar.py translations not active
  * Fixes #783: Update IS_STATE when update item in itemlistview
  * #752: Trayicon plugin has now a configuration option to change the behaviour when closing Liferea.
  * Fixes #693: Add trayicon plugin option to disable minimizing to tray
  * #764: Add MediaRSS support (e.g. Youtube feeds) to display descriptions and thumbnails
  * #773: Add WebKit Inspector menu option to HTML view when run with --debug-html (by sillyslux)
  * #714: Replaces deprecated gtk_menu_popup
  * #705: New hotkey Ctrl-O to open enclosures
  * #680: Add xdg-email command to item list popup menu
  * Drop unused glade/google_source.ui
  * #699: Refactoring of duplicate check handlingg
  * #746: Fix accessibility fatals reported by gla11y
  * Fixes #730: "Update all subscriptions at startup" overrides "Don't update this feed automatically"
  * Fixes #639: Right clicking on article no longer selects it
  * #737: Update of Italian translation
  * #745: URL fix for French example feeds
  * Update inline docs on headline view modes</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1626177600">- Fix missing python3-gobject-Gdk runtime dependency (boo#1187936)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1642075200">- Require python3-cairo; needed for tray icon (boo#1193579).</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1673784000">- Update to version 1.14.0
  + New 'Reader mode' preference that allows stripping all web
    content
  + Implement support for Webkits Intelligent Tracking Protection
  + New progress bar when loading websites
  + Youtube videos from media:video can be embedded now with a
    click on the video preview picture.
  + Changes to UserAgent handling: same UA is now used for both
    feed fetching and internal browsing.
  + New view mode 'Automatic' which switches between 'Normal' and
    'Wide' mode based on the window proportions.
  + Liferea now supports the new GTK dark theme logic, where in
    the GTK/GNOME preferences you define wether you "prefer" dark
    mode or light mode
  + Favicon discovery improvements: now detects all types of Apple
    Touch Icons, MS Tile Images and Safari Mask Icons
  + Increase size of stored favicons to 128x128px to improve icon
    quality in 3-pane wide view.
  + Make several plugins support gettext
  + Allow mutiple feed in same libnotify notification
  + Redesign of the update message in the status bar. It now shows
    a update counter of the feeds being in update.
  + You can now export a feed to XML file
  + Added an option to show news bins in reduced feed list
  + Added menu option to send item per mail
  + Default to https:// instead of http:// when user doesn't
    provide protocol on subscribing feed
  + Implement support for subscribing to LD+Json metadata listings
    e.g. concert or theater event listings
  + Implement support for subscribing to HTML5 websites
  + Support for media:description field of Youtube feeds
  + Improve HTML5 extraction: extract main tag if it exists and
    no article was found.
  + Execute feed pipe/filter commands asynchronously
  + Better explanation of feed update errors.
  + Added generic Google Reader API support (allows using FeedHQ,
    FreshRSS, Miniflux...)
  + Now allow converting TinyTinyRSS subscriptions to
    local subscriptions
  + New search folder rule to match podcasts
  + New search folder rule to match headline authors
  + New search folder rule to match subscription source
  + New search folder rule to match parent folder name
  + New search folder property that allows hiding read items
  + Now search folders are automatically rebuild when rules are
    changed
  + Added new plugin 'add-bookmark-site' that allows to configure
    a custom bookmarking site.
  + Added new plugin 'getfocus' that adds transparency on the feed
    list when it is not focussed.
  + Trayicon plugin has now a configuration option to change the
    behaviour when closing Liferea.
  + Trayicon plugin has now an option to disable minimizing to tray
  + New hot key Ctrl-D for 'Open in External Browser'
  + New hot key F10 for headerbar plugin to allow triggering the
    hamburger menu
  + New hot key Ctrl-0 to reset zoom
  + New hot key Ctrl-O to open enclosures
  + Fix hidden panes, Liferea will never allow the panes to be
    smaller than 5% in height or width
  + Wait for network to be fully available before updating
  + 2-pane mode was removed
  + Dropped CDF channel support
  + Dropped Atom 0.2/0.3 (aka Pie) support
  + Dropped blogChannel namespace support
  + Dropped photo namespace support
- Add libtool BuildRequires and run autogen.sh: the tarball is an
  unbootstrapped git archive.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674216000">- Use the properly boostrapped release tarball from upstream.
- Drop libtool BuildRequires and no longer run autogen.sh.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1678708800">- Update to version 1.14.1:
  + Fix CVE-2023-1350 - Remote code execution on feed enrichment
    (boo#1209190).</changelog>
</package>
<package pkgid="82e409d23e7e16c6f74f9b4fae4ddaaab69406adbd70443341fce3ff26aa3d96" name="liferea-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.14.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414497600">- Update to version 1.10.12 (boo#906687):
  + Fix gh#lwindolf/liferea#86: Support HTTP content negotiation
  + Fix gh#lwindolf/liferea#98: Stop calling Atom person
    constructs w/ URI invalid
  + Fix gh#lwindolf/liferea#100: Problems with dark Adwaita theme
    in GTK 3.14
- Changes from versions 1.10.6 through 1.10.11:
  + See ChangeLog file
    (/usr/share/doc/packages/liferea/ChangeLog).</changelog>
  <changelog author="badshah400@gmail.com" date="1425211200">- Update to version 1.10.14 (boo#916784):
  + Fix gh#lwindolf/liferea#154: Crashes while starting (on
    corrupt icon).
  + Fix gh#lwindolf/liferea#134: Broken default news feed.
  + Fix gh#lwindolf/liferea#122: Crashes at launch,
    "segmentation fault".
  + Fix some memory leaks.
  + Fix gh#lwindolf/liferea#145: Wrong method triggered on
    'Launch External'.
  + Fix gh#lwindolf/liferea#149: Fixes a random crash on startup.
- Changes from version 1.10.13:
  + Fix gh#lwindolf/liferea#112: Wrapping issue in folder display.
  + Fix gh#lwindolf/liferea#114: Avoid termination on UTF-8
    validation error.
  + Fix gh#lwindolf/liferea#132: Broken link in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455969600">- Update to version 1.10.18:
  + Fix gh#lwindolf/liferea#287: media:content support broken.
  + Fix gh#lwindolf/liferea#279: Rules not visible in searchdialog.
  + Fix gh#lwindolf/liferea#83: Segfault when sorting feeds in
    folder.
  + Fix gh#lwindolf/liferea#302: Broken compilation with
  - -disable-notify.
- Changes from version 1.10.17:
  + Fix gh#lwindolf/liferea#194: Add source dialog visually broken.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on
    enclosure download.
  + Fix gh#lwindolf/liferea#223: Search folder dialog don't show
    rules.
  + Fix gh#lwindolf/liferea#227: Preference dialog fails to load
    with latest GtkBuilder.
  + Fix gh#lwindolf/liferea#234: Segmentation fault upon attempting
    to add an OPML.
  + Fix compilation error when there is no libnotify.
  + Added debugging for gh#lwindolf/liferea#258: Dialog loading
    issues.
- Changes from version 1.10.16:
  + Added "Do Not Track" support (enabled per default).
  + Added x-scheme-handler/feed to desktop file.
  + Add image icons to plugins.
  + Enable tests for parsing RFC822 dates with 2 digit year.
  + Fix gh#lwindolf/liferea#78: Shaky text in feed list.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on enclose
    download.
  + Fix gh#lwindolf/liferea#198: Traceback on popup notifications.
  + Fix gh#lwindolf/liferea#216: Untranslatable strings.
  + Fix gh#lwindolf/liferea#256: PyGIWarnings on loading plugins.
- Changes from version 1.10.15:
  + Implement full screen mode for videos.
  + Fix gh#lwindolf/liferea#32: Prevent erroneous "Mark all as
    read".
  + Improves gh#lwindolf/liferea#36, gh#lwindolf/liferea#113: UI
    lock up during refresh.
  + Fix gh#lwindolf/liferea#180: Removing item from (v)folder marks
    all read.
  + Fix gh#lwindolf/liferea#140, #158: Vertical pane placement is
    forgotten.
  + Fix gh#lwindolf/liferea#182: Missing config.h include in
    date.c.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 1.10.19:
  + Fixes gh#lwindolf/liferea#317: Compilation problems in 1.10.18
    release.
  + Fixes gh#lwindolf/liferea#73: Problem with updating favicons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 1.11.7:
  + Add support for media:group.
  + Fix issues with media:content.
  + Bad .desktop categories definition.
  + Fix rules no visible in searchdialog.
  + "Download" tab in Tools/Preferences.
  + Segfault when sorting feeds in folder.
  + Updated manpage.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.12~rc3:
  + Fix GtkDoc warnings.
  + Filter commands are not asynchronous.
  + Missing space above internal browser address bar.
  + All "Unread" search folder items marked read at once.
  + Liferea does not always use theme icons when it is launched on
    system startup.
  + Updated translations.
- Changes from version 1.12~rc2:
  + Change all g_warnings() to g_print() for remote source to avoid
    "crashing" on errors.
  + Reorganized all UI definitions in separate files to simplify
    GtkBuilder handling.
  + Add GeoRSS info and map link in item header.
  + Replacing deprecated elements in preferences.
  + Create LifereaApplication type.
  + Partial RFC3229+feed support for bandwidth savings.
  + gtk_tree_store_get_path: assertion
    'iter-&gt;stamp == priv-&gt;stamp'.
  + Leftover OSM XSLT in item view.
  + Internal browser shows files system on go-back.
  + Updated translations.
- Changes from version 1.12~rc1:
  + Switch to webkit2gtk3.
  + Support for Do-Not-Track.
  + Improved trayicon plugin.
  + Support for Reedah and InoReader.
  + Support for categories in TheOldReader.
  + Simplified handling of external browsers.
- Replace pkgconfig(webkitgtk-3.0) with pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Change license to 'GPL-2.0' in place of 'GPL-2.0+':
  src/debug.[c|h]) does not specify 'or higher'.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Update to version 1.12.1:
  + Fix Lintian spelling errors.
  + Appstream data has new format.
  + Fix doesn't remember some sort orders.
  + Fix assertions/crashes on changing view layouts.
  + Workaround to avoid GtkPaned shrinking.
  + Updated translations.
- Changes from version 1.12.0:
  + Fixes unhiding from tray icon when activated via GApplication.
  + Reorder columns in 'Normal' email-like view to have the date
    column always at the end.
  + Add plugin to make unread feeds titles bold.
  + Workaround Liferea deanonymize Tor.
  + Resize both panes in normal and wide view.
  + Toggle_visibility() does not make a minimized window visible
    again.
  + Segfault when switching feed in combined view.
  + Handling of relative URLs in Atom parser.
  + Added 'View Image' context menu option in HTML view.
  + Dropped del.icio.us from social bookmarking options as it is a
    read-only service now.
  + Redesign of the wide view mode: larger titles with small text
    teasers.
  + Added optional AMP/HTML5 content enrichment feature.
  + Updated translations.
- Conditionalize handling of desktop_database_post(un),
  icon_theme_cache_post(un) and glib2_gsettings_schema_postun in
  post(un) to only apply for old versions of openSUSE.
- Clean up spec, drop obsolete clean section.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568289600">- Update to version 1.12.6:
  * #658: Add confirmation dialog when adding duplicate subscription
  * Fixes #689: When resuming from sleep feeds were being fetched
    before Wifi came up
  * Fixes #685: Headerbar plugin "Mark All Read" button is not
    feed-specific
  * Fixes #549: Scrollbars not always present in the headline area
  * Fixes #543: Next update overrides HTML5 enrichment
  * Fixes overly wide label in enclosure preferences dialog
  * Dropped unencrypted warning from auth dialog (not true anymore)
  * #688: Adding translatable tooltips for the headerbar plugin
  * #665: Webkit browser now supplies 'Liferea' component in
    user agent
  * #664: Added "Mark All As Read" button to headerbar plugin
  * #620: Added flatpak JSON
  * #579: Added item list column drag and drop reordering
  * #436, #662: Move from GnomeKeyring to libsecret
  * Fixes #663: Correct instapaper sharing link
  * Fixes #661: Update sharing links
  * Fixes #271: Consistent over usage of CPU (trigger by
    "Next Unread" loop)
  * #472, #632: Dropping Inoreader support (API broke)
  * Fixes #660: Added installable plugin to change accels
  * Fixes #654: Segfault on date out of range
  * Fixes #651: Fixes Free Music Archive link in default OPMLs
  * Fixes #649: Switch from persistent to session-only cookies
  * Fixes #645, #646: unread count of vfolder
  * Fixes #637: Extra keywords in .desktop file
    (syndication; rss; atom)
  * Fixes #557: Updating counters for remote sources
  * Updated cookie usage hint in FAQ
  * #634: Added setting for custom download commands
  * #614: GTK Headerbar support via plugin
  * #608: Refactoring UI code to switch to GAction and GtkBuilder
  * Note: this implies not having icons in the main menu anymore
  * which were still there for all non-GNOME users (see #626).
  * #589: Item list view column order rework as a preparation
    for possible real column drag&amp;drop. Introduces a new
    DConf setting for the column order.
  * Fixes #280: Mark read toolbar button always disabled for
    search folders
  * Fixes #591: Please add a safety question when
    "marking all read"
  * Fixes #625: Avoid exception in trayicon.py
  * Fixes #627: GnomeKeyring plugin fails to activate when
    keyring doesn't exist
  * Fixes #630: Fix feed list selection after DnD
  * Fixes #633: Big Memory leak in date code
  * Adding a plugin installer plugin that allows discovering
    and automatically installing 3rd party plugins
  * #585: Drop language from user agent to increase privacy
  * #583: Add transmission-gtk and aria2 as download tool options
  * #495: New command line option --disable-plugins (-p) to start
    with all plugins disabled.
  * Fixes #610: Liferea not showing up in GNOME Software
  * Fixes #604: Correctly print error message when failing to
    unlock GNOME keyring
  * Fixes #602: CSS style for GTK link colors not used
  * Fixes #581: Redirect location updates and adds HTTP 308
    (RFC 7538) support
  * Fixes #578: Unable to set unread items in bold
  * #584: Fixes broken OPML feed list entries
  * #577: Fixes newsbin doc typo
  * #584: Added Norwegian feed list
  * Translation updates
- rebase liferea-openSUSE-feeds.patch
- fixes boo#1150009</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1578916800">- Add export WEBKIT_DISABLE_COMPOSITING_MODE=1 as workaround for
  Factory build failure
  (https://github.com/lwindolf/liferea/issues/767)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1589457600">- Export WEBKIT_DISABLE_COMPOSITING_MODE=1 on Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1591963200">- Update to version 1.12.8:
  * Fixes #734: crash when selecting empty nodes
  * Fixes #727: Out-dated documentation on Firefox live bookmarks
  * Fixes headline large images/videos or images with margins
    causing horizontal scrolling in headline view
  * Fixes #840: OPML source subfolders not working
  * Update of French translation</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to version 1.12.9:
  * Fix embedded youtube video bug
  * Fix translations not applied to application menu bar and tool bar</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1620475200">- Update to version 1.13.6:
  * Change reader mode toggle from item view icon to toggle entry in item view context menu.
  * #343: UX redesign of the update message in the status bar. Now shows a update counter of the feeds being in update.
  * #964: Added pane position fix plugin providing a workaround for pane position issues when using the headerbar
  * #983: Use GtkFileChooserNative to allow selecting local files when run in sandbox.
  * Fixes #780: Improve date formatting when in locale en_GB
  * Fixes #944: Broken RTL text direction in feed content view
  * Fixes #949: Regression in notification plugin that caused it to show non-new items
  * Fixes #963: Checking for git command in plugin installer -&gt; warn user
  * Fixes #973: Broken CSS in Webkit2Gtk &gt;= 2.32
  * Updated Albanian translation
  * Updated French translation
  * Updated Italian translation
  * Updated German translation
  * #907: Add new search folder property that allows hiding read items
  * Now always shows the unread count of a search folder (instead of the item count) in the feed list
  * Now search folders are automatically rebuild when rules are changed
  * Adds a new simple focus plugin that adds transparency on the feed list when it is not focussed.
  * Add F10 hotkey to headerbar plugin to allow triggering the hamburger menu
  * Update Flatpak AppData with release dates
  * Make several plugins support gettext
  * Fixes #192: wrong button order of media player in RTL locales
  * Fixes #343: Usability of update infos in status bar. Now a total count is displayed on mass-updates and a per-feed info on single feed updates
  * Fixes #809: Usability of feed fetching errors.
  * Updated Polish translation
  * Updated German translation
  * Prevent endless loop on favicon discovery
  * #903: Prevent endless loop in feed autodiscovery
  * #912: Allow mutiple feed in same libnotify notification
  * Further favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons Fixes #440
  * Add reader mode toggle in the item view
  * #876 Add reader mode preference
  * Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings
  * Provide the default icon for feeds with no favicon as SVG for nicer rendering in wide view. Drop some unused icons. Replace tray icon with scalable version.
  * Fixes CRITICAL on trayicon plugin init
  * Fixes #884: Content of wrong feed is shown
  * Fixes #900: Flatpak needs icon named after appid
  * Fixes #908, #332: Search folder are not case-insensitive as documented
  * Fixes #899: Truncated articles (on 'Extrat full content')
  * #902: Updated Polish translation
  * #893: Update of bookmarking sites
  * #888: Changes required for Flathub
  * #882: Implement support for Webkits Intelligent Tracking Protection
  * #875: Add &lt;Ctrl&gt;-0 hotkey to reset zoom
  * #874: Add debug printing of SAX parser errors
  * #846: Remove deprecated usage of gdk_screen_*
  * #844: Update metainfo path (appdata target directory)
  * #776: CSS color update on theme change without restart
  * Fixes #883: Feed with comments: last comment replaces all content
  * Fixes #866: Bad encoding in doc/html/reference_de.html
  * Fixes #865: Fixes view mode switch
  * Fixes #841: Now shows progress bar when loading websites
  * Fixes #828: Crashing with segfault after opening feed articles
  * Fixes XLST exception on mediarss feeds with description
  * Drop blogChannel namespace support
  * Support multi-feed discovery
  * Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed
  * Drop CDF channel legacy support
  * Drop Atom 0.2/0.3 (aka Pie) legacy support
  * #893: Added Persion default feed list
  * #890: Update of Indionesian translation
  * #890: Update of French translation
  * #846, #864, #735: Fix main menu/toolbar not being translated
  * #854: Adding new search folder options to match subscription source ULR and parent folder name.
  * #851: Add accessibility check to code tests
  * #851: Fix accessibility annotations for several combo boxes.
  * #850: Fix embedded youtube video bug.
  * #765: Embed YouTube videos from MediaRSS feeds
  * #749: Add Readability.js library (Apache 2.0 licensed) and auto-apply Readability.js to all headlines
  * Drop unused glade/google_source.ui
  * Drop support of combined view mode, this is necessary to add rich content support which relies on DOM transformation and Readability.js
  * Drop ns_photo support, as it is rarely used and allows us to get rid of XSLT extra handling
  * #747: Font improvements
  * #250 Update some dialog labels
  * #803: Fix legacy links to mailing list and IRC in documentation.
  * Updated German translation
  * #861: Updated Spanish translation
  * Fixes #840: OPML source subfolders not working
  * #837: Removing GTimeVal references
  * #827: Respect global update refresh interval for TheOldReader
  * #826: Fix save/restore position issues with tray icon
  * #822: Improve performance of item list loading
  * Fixes #821: Skip current item when finding next unread item
  * #815: Add support for subscribing to HTML5 websites without RSS/Atom feeds by extracting article titles,links and descriptions
  * #816: Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view. Also add favicon URL discovery tests.
  * Fixes #821: Skip current selected unread item on 'next unread item'
  * #800: Expose remove-item action for plugins
  * Fixes #799: plugins/headerbar.py translations not active
  * Fixes #783: Update IS_STATE when update item in itemlistview
  * #752: Trayicon plugin has now a configuration option to change the behaviour when closing Liferea.
  * Fixes #693: Add trayicon plugin option to disable minimizing to tray
  * #764: Add MediaRSS support (e.g. Youtube feeds) to display descriptions and thumbnails
  * #773: Add WebKit Inspector menu option to HTML view when run with --debug-html (by sillyslux)
  * #714: Replaces deprecated gtk_menu_popup
  * #705: New hotkey Ctrl-O to open enclosures
  * #680: Add xdg-email command to item list popup menu
  * Drop unused glade/google_source.ui
  * #699: Refactoring of duplicate check handlingg
  * #746: Fix accessibility fatals reported by gla11y
  * Fixes #730: "Update all subscriptions at startup" overrides "Don't update this feed automatically"
  * Fixes #639: Right clicking on article no longer selects it
  * #737: Update of Italian translation
  * #745: URL fix for French example feeds
  * Update inline docs on headline view modes</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1626177600">- Fix missing python3-gobject-Gdk runtime dependency (boo#1187936)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1642075200">- Require python3-cairo; needed for tray icon (boo#1193579).</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1673784000">- Update to version 1.14.0
  + New 'Reader mode' preference that allows stripping all web
    content
  + Implement support for Webkits Intelligent Tracking Protection
  + New progress bar when loading websites
  + Youtube videos from media:video can be embedded now with a
    click on the video preview picture.
  + Changes to UserAgent handling: same UA is now used for both
    feed fetching and internal browsing.
  + New view mode 'Automatic' which switches between 'Normal' and
    'Wide' mode based on the window proportions.
  + Liferea now supports the new GTK dark theme logic, where in
    the GTK/GNOME preferences you define wether you "prefer" dark
    mode or light mode
  + Favicon discovery improvements: now detects all types of Apple
    Touch Icons, MS Tile Images and Safari Mask Icons
  + Increase size of stored favicons to 128x128px to improve icon
    quality in 3-pane wide view.
  + Make several plugins support gettext
  + Allow mutiple feed in same libnotify notification
  + Redesign of the update message in the status bar. It now shows
    a update counter of the feeds being in update.
  + You can now export a feed to XML file
  + Added an option to show news bins in reduced feed list
  + Added menu option to send item per mail
  + Default to https:// instead of http:// when user doesn't
    provide protocol on subscribing feed
  + Implement support for subscribing to LD+Json metadata listings
    e.g. concert or theater event listings
  + Implement support for subscribing to HTML5 websites
  + Support for media:description field of Youtube feeds
  + Improve HTML5 extraction: extract main tag if it exists and
    no article was found.
  + Execute feed pipe/filter commands asynchronously
  + Better explanation of feed update errors.
  + Added generic Google Reader API support (allows using FeedHQ,
    FreshRSS, Miniflux...)
  + Now allow converting TinyTinyRSS subscriptions to
    local subscriptions
  + New search folder rule to match podcasts
  + New search folder rule to match headline authors
  + New search folder rule to match subscription source
  + New search folder rule to match parent folder name
  + New search folder property that allows hiding read items
  + Now search folders are automatically rebuild when rules are
    changed
  + Added new plugin 'add-bookmark-site' that allows to configure
    a custom bookmarking site.
  + Added new plugin 'getfocus' that adds transparency on the feed
    list when it is not focussed.
  + Trayicon plugin has now a configuration option to change the
    behaviour when closing Liferea.
  + Trayicon plugin has now an option to disable minimizing to tray
  + New hot key Ctrl-D for 'Open in External Browser'
  + New hot key F10 for headerbar plugin to allow triggering the
    hamburger menu
  + New hot key Ctrl-0 to reset zoom
  + New hot key Ctrl-O to open enclosures
  + Fix hidden panes, Liferea will never allow the panes to be
    smaller than 5% in height or width
  + Wait for network to be fully available before updating
  + 2-pane mode was removed
  + Dropped CDF channel support
  + Dropped Atom 0.2/0.3 (aka Pie) support
  + Dropped blogChannel namespace support
  + Dropped photo namespace support
- Add libtool BuildRequires and run autogen.sh: the tarball is an
  unbootstrapped git archive.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674216000">- Use the properly boostrapped release tarball from upstream.
- Drop libtool BuildRequires and no longer run autogen.sh.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1678708800">- Update to version 1.14.1:
  + Fix CVE-2023-1350 - Remote code execution on feed enrichment
    (boo#1209190).</changelog>
</package>
<package pkgid="062970aa2f825c5285dcc1eb9128e9649d59ecc7d3a51cefd409f342012babbb" name="liferea-debuginfo" arch="s390x">
  <version epoch="0" ver="1.14.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414497600">- Update to version 1.10.12 (boo#906687):
  + Fix gh#lwindolf/liferea#86: Support HTTP content negotiation
  + Fix gh#lwindolf/liferea#98: Stop calling Atom person
    constructs w/ URI invalid
  + Fix gh#lwindolf/liferea#100: Problems with dark Adwaita theme
    in GTK 3.14
- Changes from versions 1.10.6 through 1.10.11:
  + See ChangeLog file
    (/usr/share/doc/packages/liferea/ChangeLog).</changelog>
  <changelog author="badshah400@gmail.com" date="1425211200">- Update to version 1.10.14 (boo#916784):
  + Fix gh#lwindolf/liferea#154: Crashes while starting (on
    corrupt icon).
  + Fix gh#lwindolf/liferea#134: Broken default news feed.
  + Fix gh#lwindolf/liferea#122: Crashes at launch,
    "segmentation fault".
  + Fix some memory leaks.
  + Fix gh#lwindolf/liferea#145: Wrong method triggered on
    'Launch External'.
  + Fix gh#lwindolf/liferea#149: Fixes a random crash on startup.
- Changes from version 1.10.13:
  + Fix gh#lwindolf/liferea#112: Wrapping issue in folder display.
  + Fix gh#lwindolf/liferea#114: Avoid termination on UTF-8
    validation error.
  + Fix gh#lwindolf/liferea#132: Broken link in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455969600">- Update to version 1.10.18:
  + Fix gh#lwindolf/liferea#287: media:content support broken.
  + Fix gh#lwindolf/liferea#279: Rules not visible in searchdialog.
  + Fix gh#lwindolf/liferea#83: Segfault when sorting feeds in
    folder.
  + Fix gh#lwindolf/liferea#302: Broken compilation with
  - -disable-notify.
- Changes from version 1.10.17:
  + Fix gh#lwindolf/liferea#194: Add source dialog visually broken.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on
    enclosure download.
  + Fix gh#lwindolf/liferea#223: Search folder dialog don't show
    rules.
  + Fix gh#lwindolf/liferea#227: Preference dialog fails to load
    with latest GtkBuilder.
  + Fix gh#lwindolf/liferea#234: Segmentation fault upon attempting
    to add an OPML.
  + Fix compilation error when there is no libnotify.
  + Added debugging for gh#lwindolf/liferea#258: Dialog loading
    issues.
- Changes from version 1.10.16:
  + Added "Do Not Track" support (enabled per default).
  + Added x-scheme-handler/feed to desktop file.
  + Add image icons to plugins.
  + Enable tests for parsing RFC822 dates with 2 digit year.
  + Fix gh#lwindolf/liferea#78: Shaky text in feed list.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on enclose
    download.
  + Fix gh#lwindolf/liferea#198: Traceback on popup notifications.
  + Fix gh#lwindolf/liferea#216: Untranslatable strings.
  + Fix gh#lwindolf/liferea#256: PyGIWarnings on loading plugins.
- Changes from version 1.10.15:
  + Implement full screen mode for videos.
  + Fix gh#lwindolf/liferea#32: Prevent erroneous "Mark all as
    read".
  + Improves gh#lwindolf/liferea#36, gh#lwindolf/liferea#113: UI
    lock up during refresh.
  + Fix gh#lwindolf/liferea#180: Removing item from (v)folder marks
    all read.
  + Fix gh#lwindolf/liferea#140, #158: Vertical pane placement is
    forgotten.
  + Fix gh#lwindolf/liferea#182: Missing config.h include in
    date.c.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 1.10.19:
  + Fixes gh#lwindolf/liferea#317: Compilation problems in 1.10.18
    release.
  + Fixes gh#lwindolf/liferea#73: Problem with updating favicons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 1.11.7:
  + Add support for media:group.
  + Fix issues with media:content.
  + Bad .desktop categories definition.
  + Fix rules no visible in searchdialog.
  + "Download" tab in Tools/Preferences.
  + Segfault when sorting feeds in folder.
  + Updated manpage.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.12~rc3:
  + Fix GtkDoc warnings.
  + Filter commands are not asynchronous.
  + Missing space above internal browser address bar.
  + All "Unread" search folder items marked read at once.
  + Liferea does not always use theme icons when it is launched on
    system startup.
  + Updated translations.
- Changes from version 1.12~rc2:
  + Change all g_warnings() to g_print() for remote source to avoid
    "crashing" on errors.
  + Reorganized all UI definitions in separate files to simplify
    GtkBuilder handling.
  + Add GeoRSS info and map link in item header.
  + Replacing deprecated elements in preferences.
  + Create LifereaApplication type.
  + Partial RFC3229+feed support for bandwidth savings.
  + gtk_tree_store_get_path: assertion
    'iter-&gt;stamp == priv-&gt;stamp'.
  + Leftover OSM XSLT in item view.
  + Internal browser shows files system on go-back.
  + Updated translations.
- Changes from version 1.12~rc1:
  + Switch to webkit2gtk3.
  + Support for Do-Not-Track.
  + Improved trayicon plugin.
  + Support for Reedah and InoReader.
  + Support for categories in TheOldReader.
  + Simplified handling of external browsers.
- Replace pkgconfig(webkitgtk-3.0) with pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Change license to 'GPL-2.0' in place of 'GPL-2.0+':
  src/debug.[c|h]) does not specify 'or higher'.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Update to version 1.12.1:
  + Fix Lintian spelling errors.
  + Appstream data has new format.
  + Fix doesn't remember some sort orders.
  + Fix assertions/crashes on changing view layouts.
  + Workaround to avoid GtkPaned shrinking.
  + Updated translations.
- Changes from version 1.12.0:
  + Fixes unhiding from tray icon when activated via GApplication.
  + Reorder columns in 'Normal' email-like view to have the date
    column always at the end.
  + Add plugin to make unread feeds titles bold.
  + Workaround Liferea deanonymize Tor.
  + Resize both panes in normal and wide view.
  + Toggle_visibility() does not make a minimized window visible
    again.
  + Segfault when switching feed in combined view.
  + Handling of relative URLs in Atom parser.
  + Added 'View Image' context menu option in HTML view.
  + Dropped del.icio.us from social bookmarking options as it is a
    read-only service now.
  + Redesign of the wide view mode: larger titles with small text
    teasers.
  + Added optional AMP/HTML5 content enrichment feature.
  + Updated translations.
- Conditionalize handling of desktop_database_post(un),
  icon_theme_cache_post(un) and glib2_gsettings_schema_postun in
  post(un) to only apply for old versions of openSUSE.
- Clean up spec, drop obsolete clean section.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568289600">- Update to version 1.12.6:
  * #658: Add confirmation dialog when adding duplicate subscription
  * Fixes #689: When resuming from sleep feeds were being fetched
    before Wifi came up
  * Fixes #685: Headerbar plugin "Mark All Read" button is not
    feed-specific
  * Fixes #549: Scrollbars not always present in the headline area
  * Fixes #543: Next update overrides HTML5 enrichment
  * Fixes overly wide label in enclosure preferences dialog
  * Dropped unencrypted warning from auth dialog (not true anymore)
  * #688: Adding translatable tooltips for the headerbar plugin
  * #665: Webkit browser now supplies 'Liferea' component in
    user agent
  * #664: Added "Mark All As Read" button to headerbar plugin
  * #620: Added flatpak JSON
  * #579: Added item list column drag and drop reordering
  * #436, #662: Move from GnomeKeyring to libsecret
  * Fixes #663: Correct instapaper sharing link
  * Fixes #661: Update sharing links
  * Fixes #271: Consistent over usage of CPU (trigger by
    "Next Unread" loop)
  * #472, #632: Dropping Inoreader support (API broke)
  * Fixes #660: Added installable plugin to change accels
  * Fixes #654: Segfault on date out of range
  * Fixes #651: Fixes Free Music Archive link in default OPMLs
  * Fixes #649: Switch from persistent to session-only cookies
  * Fixes #645, #646: unread count of vfolder
  * Fixes #637: Extra keywords in .desktop file
    (syndication; rss; atom)
  * Fixes #557: Updating counters for remote sources
  * Updated cookie usage hint in FAQ
  * #634: Added setting for custom download commands
  * #614: GTK Headerbar support via plugin
  * #608: Refactoring UI code to switch to GAction and GtkBuilder
  * Note: this implies not having icons in the main menu anymore
  * which were still there for all non-GNOME users (see #626).
  * #589: Item list view column order rework as a preparation
    for possible real column drag&amp;drop. Introduces a new
    DConf setting for the column order.
  * Fixes #280: Mark read toolbar button always disabled for
    search folders
  * Fixes #591: Please add a safety question when
    "marking all read"
  * Fixes #625: Avoid exception in trayicon.py
  * Fixes #627: GnomeKeyring plugin fails to activate when
    keyring doesn't exist
  * Fixes #630: Fix feed list selection after DnD
  * Fixes #633: Big Memory leak in date code
  * Adding a plugin installer plugin that allows discovering
    and automatically installing 3rd party plugins
  * #585: Drop language from user agent to increase privacy
  * #583: Add transmission-gtk and aria2 as download tool options
  * #495: New command line option --disable-plugins (-p) to start
    with all plugins disabled.
  * Fixes #610: Liferea not showing up in GNOME Software
  * Fixes #604: Correctly print error message when failing to
    unlock GNOME keyring
  * Fixes #602: CSS style for GTK link colors not used
  * Fixes #581: Redirect location updates and adds HTTP 308
    (RFC 7538) support
  * Fixes #578: Unable to set unread items in bold
  * #584: Fixes broken OPML feed list entries
  * #577: Fixes newsbin doc typo
  * #584: Added Norwegian feed list
  * Translation updates
- rebase liferea-openSUSE-feeds.patch
- fixes boo#1150009</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1578916800">- Add export WEBKIT_DISABLE_COMPOSITING_MODE=1 as workaround for
  Factory build failure
  (https://github.com/lwindolf/liferea/issues/767)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1589457600">- Export WEBKIT_DISABLE_COMPOSITING_MODE=1 on Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1591963200">- Update to version 1.12.8:
  * Fixes #734: crash when selecting empty nodes
  * Fixes #727: Out-dated documentation on Firefox live bookmarks
  * Fixes headline large images/videos or images with margins
    causing horizontal scrolling in headline view
  * Fixes #840: OPML source subfolders not working
  * Update of French translation</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to version 1.12.9:
  * Fix embedded youtube video bug
  * Fix translations not applied to application menu bar and tool bar</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1620475200">- Update to version 1.13.6:
  * Change reader mode toggle from item view icon to toggle entry in item view context menu.
  * #343: UX redesign of the update message in the status bar. Now shows a update counter of the feeds being in update.
  * #964: Added pane position fix plugin providing a workaround for pane position issues when using the headerbar
  * #983: Use GtkFileChooserNative to allow selecting local files when run in sandbox.
  * Fixes #780: Improve date formatting when in locale en_GB
  * Fixes #944: Broken RTL text direction in feed content view
  * Fixes #949: Regression in notification plugin that caused it to show non-new items
  * Fixes #963: Checking for git command in plugin installer -&gt; warn user
  * Fixes #973: Broken CSS in Webkit2Gtk &gt;= 2.32
  * Updated Albanian translation
  * Updated French translation
  * Updated Italian translation
  * Updated German translation
  * #907: Add new search folder property that allows hiding read items
  * Now always shows the unread count of a search folder (instead of the item count) in the feed list
  * Now search folders are automatically rebuild when rules are changed
  * Adds a new simple focus plugin that adds transparency on the feed list when it is not focussed.
  * Add F10 hotkey to headerbar plugin to allow triggering the hamburger menu
  * Update Flatpak AppData with release dates
  * Make several plugins support gettext
  * Fixes #192: wrong button order of media player in RTL locales
  * Fixes #343: Usability of update infos in status bar. Now a total count is displayed on mass-updates and a per-feed info on single feed updates
  * Fixes #809: Usability of feed fetching errors.
  * Updated Polish translation
  * Updated German translation
  * Prevent endless loop on favicon discovery
  * #903: Prevent endless loop in feed autodiscovery
  * #912: Allow mutiple feed in same libnotify notification
  * Further favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons Fixes #440
  * Add reader mode toggle in the item view
  * #876 Add reader mode preference
  * Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings
  * Provide the default icon for feeds with no favicon as SVG for nicer rendering in wide view. Drop some unused icons. Replace tray icon with scalable version.
  * Fixes CRITICAL on trayicon plugin init
  * Fixes #884: Content of wrong feed is shown
  * Fixes #900: Flatpak needs icon named after appid
  * Fixes #908, #332: Search folder are not case-insensitive as documented
  * Fixes #899: Truncated articles (on 'Extrat full content')
  * #902: Updated Polish translation
  * #893: Update of bookmarking sites
  * #888: Changes required for Flathub
  * #882: Implement support for Webkits Intelligent Tracking Protection
  * #875: Add &lt;Ctrl&gt;-0 hotkey to reset zoom
  * #874: Add debug printing of SAX parser errors
  * #846: Remove deprecated usage of gdk_screen_*
  * #844: Update metainfo path (appdata target directory)
  * #776: CSS color update on theme change without restart
  * Fixes #883: Feed with comments: last comment replaces all content
  * Fixes #866: Bad encoding in doc/html/reference_de.html
  * Fixes #865: Fixes view mode switch
  * Fixes #841: Now shows progress bar when loading websites
  * Fixes #828: Crashing with segfault after opening feed articles
  * Fixes XLST exception on mediarss feeds with description
  * Drop blogChannel namespace support
  * Support multi-feed discovery
  * Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed
  * Drop CDF channel legacy support
  * Drop Atom 0.2/0.3 (aka Pie) legacy support
  * #893: Added Persion default feed list
  * #890: Update of Indionesian translation
  * #890: Update of French translation
  * #846, #864, #735: Fix main menu/toolbar not being translated
  * #854: Adding new search folder options to match subscription source ULR and parent folder name.
  * #851: Add accessibility check to code tests
  * #851: Fix accessibility annotations for several combo boxes.
  * #850: Fix embedded youtube video bug.
  * #765: Embed YouTube videos from MediaRSS feeds
  * #749: Add Readability.js library (Apache 2.0 licensed) and auto-apply Readability.js to all headlines
  * Drop unused glade/google_source.ui
  * Drop support of combined view mode, this is necessary to add rich content support which relies on DOM transformation and Readability.js
  * Drop ns_photo support, as it is rarely used and allows us to get rid of XSLT extra handling
  * #747: Font improvements
  * #250 Update some dialog labels
  * #803: Fix legacy links to mailing list and IRC in documentation.
  * Updated German translation
  * #861: Updated Spanish translation
  * Fixes #840: OPML source subfolders not working
  * #837: Removing GTimeVal references
  * #827: Respect global update refresh interval for TheOldReader
  * #826: Fix save/restore position issues with tray icon
  * #822: Improve performance of item list loading
  * Fixes #821: Skip current item when finding next unread item
  * #815: Add support for subscribing to HTML5 websites without RSS/Atom feeds by extracting article titles,links and descriptions
  * #816: Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view. Also add favicon URL discovery tests.
  * Fixes #821: Skip current selected unread item on 'next unread item'
  * #800: Expose remove-item action for plugins
  * Fixes #799: plugins/headerbar.py translations not active
  * Fixes #783: Update IS_STATE when update item in itemlistview
  * #752: Trayicon plugin has now a configuration option to change the behaviour when closing Liferea.
  * Fixes #693: Add trayicon plugin option to disable minimizing to tray
  * #764: Add MediaRSS support (e.g. Youtube feeds) to display descriptions and thumbnails
  * #773: Add WebKit Inspector menu option to HTML view when run with --debug-html (by sillyslux)
  * #714: Replaces deprecated gtk_menu_popup
  * #705: New hotkey Ctrl-O to open enclosures
  * #680: Add xdg-email command to item list popup menu
  * Drop unused glade/google_source.ui
  * #699: Refactoring of duplicate check handlingg
  * #746: Fix accessibility fatals reported by gla11y
  * Fixes #730: "Update all subscriptions at startup" overrides "Don't update this feed automatically"
  * Fixes #639: Right clicking on article no longer selects it
  * #737: Update of Italian translation
  * #745: URL fix for French example feeds
  * Update inline docs on headline view modes</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1626177600">- Fix missing python3-gobject-Gdk runtime dependency (boo#1187936)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1642075200">- Require python3-cairo; needed for tray icon (boo#1193579).</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1673784000">- Update to version 1.14.0
  + New 'Reader mode' preference that allows stripping all web
    content
  + Implement support for Webkits Intelligent Tracking Protection
  + New progress bar when loading websites
  + Youtube videos from media:video can be embedded now with a
    click on the video preview picture.
  + Changes to UserAgent handling: same UA is now used for both
    feed fetching and internal browsing.
  + New view mode 'Automatic' which switches between 'Normal' and
    'Wide' mode based on the window proportions.
  + Liferea now supports the new GTK dark theme logic, where in
    the GTK/GNOME preferences you define wether you "prefer" dark
    mode or light mode
  + Favicon discovery improvements: now detects all types of Apple
    Touch Icons, MS Tile Images and Safari Mask Icons
  + Increase size of stored favicons to 128x128px to improve icon
    quality in 3-pane wide view.
  + Make several plugins support gettext
  + Allow mutiple feed in same libnotify notification
  + Redesign of the update message in the status bar. It now shows
    a update counter of the feeds being in update.
  + You can now export a feed to XML file
  + Added an option to show news bins in reduced feed list
  + Added menu option to send item per mail
  + Default to https:// instead of http:// when user doesn't
    provide protocol on subscribing feed
  + Implement support for subscribing to LD+Json metadata listings
    e.g. concert or theater event listings
  + Implement support for subscribing to HTML5 websites
  + Support for media:description field of Youtube feeds
  + Improve HTML5 extraction: extract main tag if it exists and
    no article was found.
  + Execute feed pipe/filter commands asynchronously
  + Better explanation of feed update errors.
  + Added generic Google Reader API support (allows using FeedHQ,
    FreshRSS, Miniflux...)
  + Now allow converting TinyTinyRSS subscriptions to
    local subscriptions
  + New search folder rule to match podcasts
  + New search folder rule to match headline authors
  + New search folder rule to match subscription source
  + New search folder rule to match parent folder name
  + New search folder property that allows hiding read items
  + Now search folders are automatically rebuild when rules are
    changed
  + Added new plugin 'add-bookmark-site' that allows to configure
    a custom bookmarking site.
  + Added new plugin 'getfocus' that adds transparency on the feed
    list when it is not focussed.
  + Trayicon plugin has now a configuration option to change the
    behaviour when closing Liferea.
  + Trayicon plugin has now an option to disable minimizing to tray
  + New hot key Ctrl-D for 'Open in External Browser'
  + New hot key F10 for headerbar plugin to allow triggering the
    hamburger menu
  + New hot key Ctrl-0 to reset zoom
  + New hot key Ctrl-O to open enclosures
  + Fix hidden panes, Liferea will never allow the panes to be
    smaller than 5% in height or width
  + Wait for network to be fully available before updating
  + 2-pane mode was removed
  + Dropped CDF channel support
  + Dropped Atom 0.2/0.3 (aka Pie) support
  + Dropped blogChannel namespace support
  + Dropped photo namespace support
- Add libtool BuildRequires and run autogen.sh: the tarball is an
  unbootstrapped git archive.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674216000">- Use the properly boostrapped release tarball from upstream.
- Drop libtool BuildRequires and no longer run autogen.sh.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1678708800">- Update to version 1.14.1:
  + Fix CVE-2023-1350 - Remote code execution on feed enrichment
    (boo#1209190).</changelog>
</package>
<package pkgid="5868faf243150540edc79ea8c280fe586cdde6bdc58db5f4c53afa4db0ce8e90" name="liferea-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414497600">- Update to version 1.10.12 (boo#906687):
  + Fix gh#lwindolf/liferea#86: Support HTTP content negotiation
  + Fix gh#lwindolf/liferea#98: Stop calling Atom person
    constructs w/ URI invalid
  + Fix gh#lwindolf/liferea#100: Problems with dark Adwaita theme
    in GTK 3.14
- Changes from versions 1.10.6 through 1.10.11:
  + See ChangeLog file
    (/usr/share/doc/packages/liferea/ChangeLog).</changelog>
  <changelog author="badshah400@gmail.com" date="1425211200">- Update to version 1.10.14 (boo#916784):
  + Fix gh#lwindolf/liferea#154: Crashes while starting (on
    corrupt icon).
  + Fix gh#lwindolf/liferea#134: Broken default news feed.
  + Fix gh#lwindolf/liferea#122: Crashes at launch,
    "segmentation fault".
  + Fix some memory leaks.
  + Fix gh#lwindolf/liferea#145: Wrong method triggered on
    'Launch External'.
  + Fix gh#lwindolf/liferea#149: Fixes a random crash on startup.
- Changes from version 1.10.13:
  + Fix gh#lwindolf/liferea#112: Wrapping issue in folder display.
  + Fix gh#lwindolf/liferea#114: Avoid termination on UTF-8
    validation error.
  + Fix gh#lwindolf/liferea#132: Broken link in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455969600">- Update to version 1.10.18:
  + Fix gh#lwindolf/liferea#287: media:content support broken.
  + Fix gh#lwindolf/liferea#279: Rules not visible in searchdialog.
  + Fix gh#lwindolf/liferea#83: Segfault when sorting feeds in
    folder.
  + Fix gh#lwindolf/liferea#302: Broken compilation with
  - -disable-notify.
- Changes from version 1.10.17:
  + Fix gh#lwindolf/liferea#194: Add source dialog visually broken.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on
    enclosure download.
  + Fix gh#lwindolf/liferea#223: Search folder dialog don't show
    rules.
  + Fix gh#lwindolf/liferea#227: Preference dialog fails to load
    with latest GtkBuilder.
  + Fix gh#lwindolf/liferea#234: Segmentation fault upon attempting
    to add an OPML.
  + Fix compilation error when there is no libnotify.
  + Added debugging for gh#lwindolf/liferea#258: Dialog loading
    issues.
- Changes from version 1.10.16:
  + Added "Do Not Track" support (enabled per default).
  + Added x-scheme-handler/feed to desktop file.
  + Add image icons to plugins.
  + Enable tests for parsing RFC822 dates with 2 digit year.
  + Fix gh#lwindolf/liferea#78: Shaky text in feed list.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on enclose
    download.
  + Fix gh#lwindolf/liferea#198: Traceback on popup notifications.
  + Fix gh#lwindolf/liferea#216: Untranslatable strings.
  + Fix gh#lwindolf/liferea#256: PyGIWarnings on loading plugins.
- Changes from version 1.10.15:
  + Implement full screen mode for videos.
  + Fix gh#lwindolf/liferea#32: Prevent erroneous "Mark all as
    read".
  + Improves gh#lwindolf/liferea#36, gh#lwindolf/liferea#113: UI
    lock up during refresh.
  + Fix gh#lwindolf/liferea#180: Removing item from (v)folder marks
    all read.
  + Fix gh#lwindolf/liferea#140, #158: Vertical pane placement is
    forgotten.
  + Fix gh#lwindolf/liferea#182: Missing config.h include in
    date.c.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 1.10.19:
  + Fixes gh#lwindolf/liferea#317: Compilation problems in 1.10.18
    release.
  + Fixes gh#lwindolf/liferea#73: Problem with updating favicons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 1.11.7:
  + Add support for media:group.
  + Fix issues with media:content.
  + Bad .desktop categories definition.
  + Fix rules no visible in searchdialog.
  + "Download" tab in Tools/Preferences.
  + Segfault when sorting feeds in folder.
  + Updated manpage.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.12~rc3:
  + Fix GtkDoc warnings.
  + Filter commands are not asynchronous.
  + Missing space above internal browser address bar.
  + All "Unread" search folder items marked read at once.
  + Liferea does not always use theme icons when it is launched on
    system startup.
  + Updated translations.
- Changes from version 1.12~rc2:
  + Change all g_warnings() to g_print() for remote source to avoid
    "crashing" on errors.
  + Reorganized all UI definitions in separate files to simplify
    GtkBuilder handling.
  + Add GeoRSS info and map link in item header.
  + Replacing deprecated elements in preferences.
  + Create LifereaApplication type.
  + Partial RFC3229+feed support for bandwidth savings.
  + gtk_tree_store_get_path: assertion
    'iter-&gt;stamp == priv-&gt;stamp'.
  + Leftover OSM XSLT in item view.
  + Internal browser shows files system on go-back.
  + Updated translations.
- Changes from version 1.12~rc1:
  + Switch to webkit2gtk3.
  + Support for Do-Not-Track.
  + Improved trayicon plugin.
  + Support for Reedah and InoReader.
  + Support for categories in TheOldReader.
  + Simplified handling of external browsers.
- Replace pkgconfig(webkitgtk-3.0) with pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Change license to 'GPL-2.0' in place of 'GPL-2.0+':
  src/debug.[c|h]) does not specify 'or higher'.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Update to version 1.12.1:
  + Fix Lintian spelling errors.
  + Appstream data has new format.
  + Fix doesn't remember some sort orders.
  + Fix assertions/crashes on changing view layouts.
  + Workaround to avoid GtkPaned shrinking.
  + Updated translations.
- Changes from version 1.12.0:
  + Fixes unhiding from tray icon when activated via GApplication.
  + Reorder columns in 'Normal' email-like view to have the date
    column always at the end.
  + Add plugin to make unread feeds titles bold.
  + Workaround Liferea deanonymize Tor.
  + Resize both panes in normal and wide view.
  + Toggle_visibility() does not make a minimized window visible
    again.
  + Segfault when switching feed in combined view.
  + Handling of relative URLs in Atom parser.
  + Added 'View Image' context menu option in HTML view.
  + Dropped del.icio.us from social bookmarking options as it is a
    read-only service now.
  + Redesign of the wide view mode: larger titles with small text
    teasers.
  + Added optional AMP/HTML5 content enrichment feature.
  + Updated translations.
- Conditionalize handling of desktop_database_post(un),
  icon_theme_cache_post(un) and glib2_gsettings_schema_postun in
  post(un) to only apply for old versions of openSUSE.
- Clean up spec, drop obsolete clean section.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568289600">- Update to version 1.12.6:
  * #658: Add confirmation dialog when adding duplicate subscription
  * Fixes #689: When resuming from sleep feeds were being fetched
    before Wifi came up
  * Fixes #685: Headerbar plugin "Mark All Read" button is not
    feed-specific
  * Fixes #549: Scrollbars not always present in the headline area
  * Fixes #543: Next update overrides HTML5 enrichment
  * Fixes overly wide label in enclosure preferences dialog
  * Dropped unencrypted warning from auth dialog (not true anymore)
  * #688: Adding translatable tooltips for the headerbar plugin
  * #665: Webkit browser now supplies 'Liferea' component in
    user agent
  * #664: Added "Mark All As Read" button to headerbar plugin
  * #620: Added flatpak JSON
  * #579: Added item list column drag and drop reordering
  * #436, #662: Move from GnomeKeyring to libsecret
  * Fixes #663: Correct instapaper sharing link
  * Fixes #661: Update sharing links
  * Fixes #271: Consistent over usage of CPU (trigger by
    "Next Unread" loop)
  * #472, #632: Dropping Inoreader support (API broke)
  * Fixes #660: Added installable plugin to change accels
  * Fixes #654: Segfault on date out of range
  * Fixes #651: Fixes Free Music Archive link in default OPMLs
  * Fixes #649: Switch from persistent to session-only cookies
  * Fixes #645, #646: unread count of vfolder
  * Fixes #637: Extra keywords in .desktop file
    (syndication; rss; atom)
  * Fixes #557: Updating counters for remote sources
  * Updated cookie usage hint in FAQ
  * #634: Added setting for custom download commands
  * #614: GTK Headerbar support via plugin
  * #608: Refactoring UI code to switch to GAction and GtkBuilder
  * Note: this implies not having icons in the main menu anymore
  * which were still there for all non-GNOME users (see #626).
  * #589: Item list view column order rework as a preparation
    for possible real column drag&amp;drop. Introduces a new
    DConf setting for the column order.
  * Fixes #280: Mark read toolbar button always disabled for
    search folders
  * Fixes #591: Please add a safety question when
    "marking all read"
  * Fixes #625: Avoid exception in trayicon.py
  * Fixes #627: GnomeKeyring plugin fails to activate when
    keyring doesn't exist
  * Fixes #630: Fix feed list selection after DnD
  * Fixes #633: Big Memory leak in date code
  * Adding a plugin installer plugin that allows discovering
    and automatically installing 3rd party plugins
  * #585: Drop language from user agent to increase privacy
  * #583: Add transmission-gtk and aria2 as download tool options
  * #495: New command line option --disable-plugins (-p) to start
    with all plugins disabled.
  * Fixes #610: Liferea not showing up in GNOME Software
  * Fixes #604: Correctly print error message when failing to
    unlock GNOME keyring
  * Fixes #602: CSS style for GTK link colors not used
  * Fixes #581: Redirect location updates and adds HTTP 308
    (RFC 7538) support
  * Fixes #578: Unable to set unread items in bold
  * #584: Fixes broken OPML feed list entries
  * #577: Fixes newsbin doc typo
  * #584: Added Norwegian feed list
  * Translation updates
- rebase liferea-openSUSE-feeds.patch
- fixes boo#1150009</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1578916800">- Add export WEBKIT_DISABLE_COMPOSITING_MODE=1 as workaround for
  Factory build failure
  (https://github.com/lwindolf/liferea/issues/767)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1589457600">- Export WEBKIT_DISABLE_COMPOSITING_MODE=1 on Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1591963200">- Update to version 1.12.8:
  * Fixes #734: crash when selecting empty nodes
  * Fixes #727: Out-dated documentation on Firefox live bookmarks
  * Fixes headline large images/videos or images with margins
    causing horizontal scrolling in headline view
  * Fixes #840: OPML source subfolders not working
  * Update of French translation</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to version 1.12.9:
  * Fix embedded youtube video bug
  * Fix translations not applied to application menu bar and tool bar</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1620475200">- Update to version 1.13.6:
  * Change reader mode toggle from item view icon to toggle entry in item view context menu.
  * #343: UX redesign of the update message in the status bar. Now shows a update counter of the feeds being in update.
  * #964: Added pane position fix plugin providing a workaround for pane position issues when using the headerbar
  * #983: Use GtkFileChooserNative to allow selecting local files when run in sandbox.
  * Fixes #780: Improve date formatting when in locale en_GB
  * Fixes #944: Broken RTL text direction in feed content view
  * Fixes #949: Regression in notification plugin that caused it to show non-new items
  * Fixes #963: Checking for git command in plugin installer -&gt; warn user
  * Fixes #973: Broken CSS in Webkit2Gtk &gt;= 2.32
  * Updated Albanian translation
  * Updated French translation
  * Updated Italian translation
  * Updated German translation
  * #907: Add new search folder property that allows hiding read items
  * Now always shows the unread count of a search folder (instead of the item count) in the feed list
  * Now search folders are automatically rebuild when rules are changed
  * Adds a new simple focus plugin that adds transparency on the feed list when it is not focussed.
  * Add F10 hotkey to headerbar plugin to allow triggering the hamburger menu
  * Update Flatpak AppData with release dates
  * Make several plugins support gettext
  * Fixes #192: wrong button order of media player in RTL locales
  * Fixes #343: Usability of update infos in status bar. Now a total count is displayed on mass-updates and a per-feed info on single feed updates
  * Fixes #809: Usability of feed fetching errors.
  * Updated Polish translation
  * Updated German translation
  * Prevent endless loop on favicon discovery
  * #903: Prevent endless loop in feed autodiscovery
  * #912: Allow mutiple feed in same libnotify notification
  * Further favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons Fixes #440
  * Add reader mode toggle in the item view
  * #876 Add reader mode preference
  * Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings
  * Provide the default icon for feeds with no favicon as SVG for nicer rendering in wide view. Drop some unused icons. Replace tray icon with scalable version.
  * Fixes CRITICAL on trayicon plugin init
  * Fixes #884: Content of wrong feed is shown
  * Fixes #900: Flatpak needs icon named after appid
  * Fixes #908, #332: Search folder are not case-insensitive as documented
  * Fixes #899: Truncated articles (on 'Extrat full content')
  * #902: Updated Polish translation
  * #893: Update of bookmarking sites
  * #888: Changes required for Flathub
  * #882: Implement support for Webkits Intelligent Tracking Protection
  * #875: Add &lt;Ctrl&gt;-0 hotkey to reset zoom
  * #874: Add debug printing of SAX parser errors
  * #846: Remove deprecated usage of gdk_screen_*
  * #844: Update metainfo path (appdata target directory)
  * #776: CSS color update on theme change without restart
  * Fixes #883: Feed with comments: last comment replaces all content
  * Fixes #866: Bad encoding in doc/html/reference_de.html
  * Fixes #865: Fixes view mode switch
  * Fixes #841: Now shows progress bar when loading websites
  * Fixes #828: Crashing with segfault after opening feed articles
  * Fixes XLST exception on mediarss feeds with description
  * Drop blogChannel namespace support
  * Support multi-feed discovery
  * Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed
  * Drop CDF channel legacy support
  * Drop Atom 0.2/0.3 (aka Pie) legacy support
  * #893: Added Persion default feed list
  * #890: Update of Indionesian translation
  * #890: Update of French translation
  * #846, #864, #735: Fix main menu/toolbar not being translated
  * #854: Adding new search folder options to match subscription source ULR and parent folder name.
  * #851: Add accessibility check to code tests
  * #851: Fix accessibility annotations for several combo boxes.
  * #850: Fix embedded youtube video bug.
  * #765: Embed YouTube videos from MediaRSS feeds
  * #749: Add Readability.js library (Apache 2.0 licensed) and auto-apply Readability.js to all headlines
  * Drop unused glade/google_source.ui
  * Drop support of combined view mode, this is necessary to add rich content support which relies on DOM transformation and Readability.js
  * Drop ns_photo support, as it is rarely used and allows us to get rid of XSLT extra handling
  * #747: Font improvements
  * #250 Update some dialog labels
  * #803: Fix legacy links to mailing list and IRC in documentation.
  * Updated German translation
  * #861: Updated Spanish translation
  * Fixes #840: OPML source subfolders not working
  * #837: Removing GTimeVal references
  * #827: Respect global update refresh interval for TheOldReader
  * #826: Fix save/restore position issues with tray icon
  * #822: Improve performance of item list loading
  * Fixes #821: Skip current item when finding next unread item
  * #815: Add support for subscribing to HTML5 websites without RSS/Atom feeds by extracting article titles,links and descriptions
  * #816: Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view. Also add favicon URL discovery tests.
  * Fixes #821: Skip current selected unread item on 'next unread item'
  * #800: Expose remove-item action for plugins
  * Fixes #799: plugins/headerbar.py translations not active
  * Fixes #783: Update IS_STATE when update item in itemlistview
  * #752: Trayicon plugin has now a configuration option to change the behaviour when closing Liferea.
  * Fixes #693: Add trayicon plugin option to disable minimizing to tray
  * #764: Add MediaRSS support (e.g. Youtube feeds) to display descriptions and thumbnails
  * #773: Add WebKit Inspector menu option to HTML view when run with --debug-html (by sillyslux)
  * #714: Replaces deprecated gtk_menu_popup
  * #705: New hotkey Ctrl-O to open enclosures
  * #680: Add xdg-email command to item list popup menu
  * Drop unused glade/google_source.ui
  * #699: Refactoring of duplicate check handlingg
  * #746: Fix accessibility fatals reported by gla11y
  * Fixes #730: "Update all subscriptions at startup" overrides "Don't update this feed automatically"
  * Fixes #639: Right clicking on article no longer selects it
  * #737: Update of Italian translation
  * #745: URL fix for French example feeds
  * Update inline docs on headline view modes</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1626177600">- Fix missing python3-gobject-Gdk runtime dependency (boo#1187936)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1642075200">- Require python3-cairo; needed for tray icon (boo#1193579).</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1673784000">- Update to version 1.14.0
  + New 'Reader mode' preference that allows stripping all web
    content
  + Implement support for Webkits Intelligent Tracking Protection
  + New progress bar when loading websites
  + Youtube videos from media:video can be embedded now with a
    click on the video preview picture.
  + Changes to UserAgent handling: same UA is now used for both
    feed fetching and internal browsing.
  + New view mode 'Automatic' which switches between 'Normal' and
    'Wide' mode based on the window proportions.
  + Liferea now supports the new GTK dark theme logic, where in
    the GTK/GNOME preferences you define wether you "prefer" dark
    mode or light mode
  + Favicon discovery improvements: now detects all types of Apple
    Touch Icons, MS Tile Images and Safari Mask Icons
  + Increase size of stored favicons to 128x128px to improve icon
    quality in 3-pane wide view.
  + Make several plugins support gettext
  + Allow mutiple feed in same libnotify notification
  + Redesign of the update message in the status bar. It now shows
    a update counter of the feeds being in update.
  + You can now export a feed to XML file
  + Added an option to show news bins in reduced feed list
  + Added menu option to send item per mail
  + Default to https:// instead of http:// when user doesn't
    provide protocol on subscribing feed
  + Implement support for subscribing to LD+Json metadata listings
    e.g. concert or theater event listings
  + Implement support for subscribing to HTML5 websites
  + Support for media:description field of Youtube feeds
  + Improve HTML5 extraction: extract main tag if it exists and
    no article was found.
  + Execute feed pipe/filter commands asynchronously
  + Better explanation of feed update errors.
  + Added generic Google Reader API support (allows using FeedHQ,
    FreshRSS, Miniflux...)
  + Now allow converting TinyTinyRSS subscriptions to
    local subscriptions
  + New search folder rule to match podcasts
  + New search folder rule to match headline authors
  + New search folder rule to match subscription source
  + New search folder rule to match parent folder name
  + New search folder property that allows hiding read items
  + Now search folders are automatically rebuild when rules are
    changed
  + Added new plugin 'add-bookmark-site' that allows to configure
    a custom bookmarking site.
  + Added new plugin 'getfocus' that adds transparency on the feed
    list when it is not focussed.
  + Trayicon plugin has now a configuration option to change the
    behaviour when closing Liferea.
  + Trayicon plugin has now an option to disable minimizing to tray
  + New hot key Ctrl-D for 'Open in External Browser'
  + New hot key F10 for headerbar plugin to allow triggering the
    hamburger menu
  + New hot key Ctrl-0 to reset zoom
  + New hot key Ctrl-O to open enclosures
  + Fix hidden panes, Liferea will never allow the panes to be
    smaller than 5% in height or width
  + Wait for network to be fully available before updating
  + 2-pane mode was removed
  + Dropped CDF channel support
  + Dropped Atom 0.2/0.3 (aka Pie) support
  + Dropped blogChannel namespace support
  + Dropped photo namespace support
- Add libtool BuildRequires and run autogen.sh: the tarball is an
  unbootstrapped git archive.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674216000">- Use the properly boostrapped release tarball from upstream.
- Drop libtool BuildRequires and no longer run autogen.sh.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1678708800">- Update to version 1.14.1:
  + Fix CVE-2023-1350 - Remote code execution on feed enrichment
    (boo#1209190).</changelog>
</package>
<package pkgid="022c9f85ea03b96028efe98c33aab76554d6b32a0c97c0cdbf93152e54ec6963" name="liferea-debugsource" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414497600">- Update to version 1.10.12 (boo#906687):
  + Fix gh#lwindolf/liferea#86: Support HTTP content negotiation
  + Fix gh#lwindolf/liferea#98: Stop calling Atom person
    constructs w/ URI invalid
  + Fix gh#lwindolf/liferea#100: Problems with dark Adwaita theme
    in GTK 3.14
- Changes from versions 1.10.6 through 1.10.11:
  + See ChangeLog file
    (/usr/share/doc/packages/liferea/ChangeLog).</changelog>
  <changelog author="badshah400@gmail.com" date="1425211200">- Update to version 1.10.14 (boo#916784):
  + Fix gh#lwindolf/liferea#154: Crashes while starting (on
    corrupt icon).
  + Fix gh#lwindolf/liferea#134: Broken default news feed.
  + Fix gh#lwindolf/liferea#122: Crashes at launch,
    "segmentation fault".
  + Fix some memory leaks.
  + Fix gh#lwindolf/liferea#145: Wrong method triggered on
    'Launch External'.
  + Fix gh#lwindolf/liferea#149: Fixes a random crash on startup.
- Changes from version 1.10.13:
  + Fix gh#lwindolf/liferea#112: Wrapping issue in folder display.
  + Fix gh#lwindolf/liferea#114: Avoid termination on UTF-8
    validation error.
  + Fix gh#lwindolf/liferea#132: Broken link in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455969600">- Update to version 1.10.18:
  + Fix gh#lwindolf/liferea#287: media:content support broken.
  + Fix gh#lwindolf/liferea#279: Rules not visible in searchdialog.
  + Fix gh#lwindolf/liferea#83: Segfault when sorting feeds in
    folder.
  + Fix gh#lwindolf/liferea#302: Broken compilation with
  - -disable-notify.
- Changes from version 1.10.17:
  + Fix gh#lwindolf/liferea#194: Add source dialog visually broken.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on
    enclosure download.
  + Fix gh#lwindolf/liferea#223: Search folder dialog don't show
    rules.
  + Fix gh#lwindolf/liferea#227: Preference dialog fails to load
    with latest GtkBuilder.
  + Fix gh#lwindolf/liferea#234: Segmentation fault upon attempting
    to add an OPML.
  + Fix compilation error when there is no libnotify.
  + Added debugging for gh#lwindolf/liferea#258: Dialog loading
    issues.
- Changes from version 1.10.16:
  + Added "Do Not Track" support (enabled per default).
  + Added x-scheme-handler/feed to desktop file.
  + Add image icons to plugins.
  + Enable tests for parsing RFC822 dates with 2 digit year.
  + Fix gh#lwindolf/liferea#78: Shaky text in feed list.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on enclose
    download.
  + Fix gh#lwindolf/liferea#198: Traceback on popup notifications.
  + Fix gh#lwindolf/liferea#216: Untranslatable strings.
  + Fix gh#lwindolf/liferea#256: PyGIWarnings on loading plugins.
- Changes from version 1.10.15:
  + Implement full screen mode for videos.
  + Fix gh#lwindolf/liferea#32: Prevent erroneous "Mark all as
    read".
  + Improves gh#lwindolf/liferea#36, gh#lwindolf/liferea#113: UI
    lock up during refresh.
  + Fix gh#lwindolf/liferea#180: Removing item from (v)folder marks
    all read.
  + Fix gh#lwindolf/liferea#140, #158: Vertical pane placement is
    forgotten.
  + Fix gh#lwindolf/liferea#182: Missing config.h include in
    date.c.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 1.10.19:
  + Fixes gh#lwindolf/liferea#317: Compilation problems in 1.10.18
    release.
  + Fixes gh#lwindolf/liferea#73: Problem with updating favicons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 1.11.7:
  + Add support for media:group.
  + Fix issues with media:content.
  + Bad .desktop categories definition.
  + Fix rules no visible in searchdialog.
  + "Download" tab in Tools/Preferences.
  + Segfault when sorting feeds in folder.
  + Updated manpage.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.12~rc3:
  + Fix GtkDoc warnings.
  + Filter commands are not asynchronous.
  + Missing space above internal browser address bar.
  + All "Unread" search folder items marked read at once.
  + Liferea does not always use theme icons when it is launched on
    system startup.
  + Updated translations.
- Changes from version 1.12~rc2:
  + Change all g_warnings() to g_print() for remote source to avoid
    "crashing" on errors.
  + Reorganized all UI definitions in separate files to simplify
    GtkBuilder handling.
  + Add GeoRSS info and map link in item header.
  + Replacing deprecated elements in preferences.
  + Create LifereaApplication type.
  + Partial RFC3229+feed support for bandwidth savings.
  + gtk_tree_store_get_path: assertion
    'iter-&gt;stamp == priv-&gt;stamp'.
  + Leftover OSM XSLT in item view.
  + Internal browser shows files system on go-back.
  + Updated translations.
- Changes from version 1.12~rc1:
  + Switch to webkit2gtk3.
  + Support for Do-Not-Track.
  + Improved trayicon plugin.
  + Support for Reedah and InoReader.
  + Support for categories in TheOldReader.
  + Simplified handling of external browsers.
- Replace pkgconfig(webkitgtk-3.0) with pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Change license to 'GPL-2.0' in place of 'GPL-2.0+':
  src/debug.[c|h]) does not specify 'or higher'.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Update to version 1.12.1:
  + Fix Lintian spelling errors.
  + Appstream data has new format.
  + Fix doesn't remember some sort orders.
  + Fix assertions/crashes on changing view layouts.
  + Workaround to avoid GtkPaned shrinking.
  + Updated translations.
- Changes from version 1.12.0:
  + Fixes unhiding from tray icon when activated via GApplication.
  + Reorder columns in 'Normal' email-like view to have the date
    column always at the end.
  + Add plugin to make unread feeds titles bold.
  + Workaround Liferea deanonymize Tor.
  + Resize both panes in normal and wide view.
  + Toggle_visibility() does not make a minimized window visible
    again.
  + Segfault when switching feed in combined view.
  + Handling of relative URLs in Atom parser.
  + Added 'View Image' context menu option in HTML view.
  + Dropped del.icio.us from social bookmarking options as it is a
    read-only service now.
  + Redesign of the wide view mode: larger titles with small text
    teasers.
  + Added optional AMP/HTML5 content enrichment feature.
  + Updated translations.
- Conditionalize handling of desktop_database_post(un),
  icon_theme_cache_post(un) and glib2_gsettings_schema_postun in
  post(un) to only apply for old versions of openSUSE.
- Clean up spec, drop obsolete clean section.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568289600">- Update to version 1.12.6:
  * #658: Add confirmation dialog when adding duplicate subscription
  * Fixes #689: When resuming from sleep feeds were being fetched
    before Wifi came up
  * Fixes #685: Headerbar plugin "Mark All Read" button is not
    feed-specific
  * Fixes #549: Scrollbars not always present in the headline area
  * Fixes #543: Next update overrides HTML5 enrichment
  * Fixes overly wide label in enclosure preferences dialog
  * Dropped unencrypted warning from auth dialog (not true anymore)
  * #688: Adding translatable tooltips for the headerbar plugin
  * #665: Webkit browser now supplies 'Liferea' component in
    user agent
  * #664: Added "Mark All As Read" button to headerbar plugin
  * #620: Added flatpak JSON
  * #579: Added item list column drag and drop reordering
  * #436, #662: Move from GnomeKeyring to libsecret
  * Fixes #663: Correct instapaper sharing link
  * Fixes #661: Update sharing links
  * Fixes #271: Consistent over usage of CPU (trigger by
    "Next Unread" loop)
  * #472, #632: Dropping Inoreader support (API broke)
  * Fixes #660: Added installable plugin to change accels
  * Fixes #654: Segfault on date out of range
  * Fixes #651: Fixes Free Music Archive link in default OPMLs
  * Fixes #649: Switch from persistent to session-only cookies
  * Fixes #645, #646: unread count of vfolder
  * Fixes #637: Extra keywords in .desktop file
    (syndication; rss; atom)
  * Fixes #557: Updating counters for remote sources
  * Updated cookie usage hint in FAQ
  * #634: Added setting for custom download commands
  * #614: GTK Headerbar support via plugin
  * #608: Refactoring UI code to switch to GAction and GtkBuilder
  * Note: this implies not having icons in the main menu anymore
  * which were still there for all non-GNOME users (see #626).
  * #589: Item list view column order rework as a preparation
    for possible real column drag&amp;drop. Introduces a new
    DConf setting for the column order.
  * Fixes #280: Mark read toolbar button always disabled for
    search folders
  * Fixes #591: Please add a safety question when
    "marking all read"
  * Fixes #625: Avoid exception in trayicon.py
  * Fixes #627: GnomeKeyring plugin fails to activate when
    keyring doesn't exist
  * Fixes #630: Fix feed list selection after DnD
  * Fixes #633: Big Memory leak in date code
  * Adding a plugin installer plugin that allows discovering
    and automatically installing 3rd party plugins
  * #585: Drop language from user agent to increase privacy
  * #583: Add transmission-gtk and aria2 as download tool options
  * #495: New command line option --disable-plugins (-p) to start
    with all plugins disabled.
  * Fixes #610: Liferea not showing up in GNOME Software
  * Fixes #604: Correctly print error message when failing to
    unlock GNOME keyring
  * Fixes #602: CSS style for GTK link colors not used
  * Fixes #581: Redirect location updates and adds HTTP 308
    (RFC 7538) support
  * Fixes #578: Unable to set unread items in bold
  * #584: Fixes broken OPML feed list entries
  * #577: Fixes newsbin doc typo
  * #584: Added Norwegian feed list
  * Translation updates
- rebase liferea-openSUSE-feeds.patch
- fixes boo#1150009</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1578916800">- Add export WEBKIT_DISABLE_COMPOSITING_MODE=1 as workaround for
  Factory build failure
  (https://github.com/lwindolf/liferea/issues/767)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1589457600">- Export WEBKIT_DISABLE_COMPOSITING_MODE=1 on Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1591963200">- Update to version 1.12.8:
  * Fixes #734: crash when selecting empty nodes
  * Fixes #727: Out-dated documentation on Firefox live bookmarks
  * Fixes headline large images/videos or images with margins
    causing horizontal scrolling in headline view
  * Fixes #840: OPML source subfolders not working
  * Update of French translation</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to version 1.12.9:
  * Fix embedded youtube video bug
  * Fix translations not applied to application menu bar and tool bar</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1620475200">- Update to version 1.13.6:
  * Change reader mode toggle from item view icon to toggle entry in item view context menu.
  * #343: UX redesign of the update message in the status bar. Now shows a update counter of the feeds being in update.
  * #964: Added pane position fix plugin providing a workaround for pane position issues when using the headerbar
  * #983: Use GtkFileChooserNative to allow selecting local files when run in sandbox.
  * Fixes #780: Improve date formatting when in locale en_GB
  * Fixes #944: Broken RTL text direction in feed content view
  * Fixes #949: Regression in notification plugin that caused it to show non-new items
  * Fixes #963: Checking for git command in plugin installer -&gt; warn user
  * Fixes #973: Broken CSS in Webkit2Gtk &gt;= 2.32
  * Updated Albanian translation
  * Updated French translation
  * Updated Italian translation
  * Updated German translation
  * #907: Add new search folder property that allows hiding read items
  * Now always shows the unread count of a search folder (instead of the item count) in the feed list
  * Now search folders are automatically rebuild when rules are changed
  * Adds a new simple focus plugin that adds transparency on the feed list when it is not focussed.
  * Add F10 hotkey to headerbar plugin to allow triggering the hamburger menu
  * Update Flatpak AppData with release dates
  * Make several plugins support gettext
  * Fixes #192: wrong button order of media player in RTL locales
  * Fixes #343: Usability of update infos in status bar. Now a total count is displayed on mass-updates and a per-feed info on single feed updates
  * Fixes #809: Usability of feed fetching errors.
  * Updated Polish translation
  * Updated German translation
  * Prevent endless loop on favicon discovery
  * #903: Prevent endless loop in feed autodiscovery
  * #912: Allow mutiple feed in same libnotify notification
  * Further favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons Fixes #440
  * Add reader mode toggle in the item view
  * #876 Add reader mode preference
  * Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings
  * Provide the default icon for feeds with no favicon as SVG for nicer rendering in wide view. Drop some unused icons. Replace tray icon with scalable version.
  * Fixes CRITICAL on trayicon plugin init
  * Fixes #884: Content of wrong feed is shown
  * Fixes #900: Flatpak needs icon named after appid
  * Fixes #908, #332: Search folder are not case-insensitive as documented
  * Fixes #899: Truncated articles (on 'Extrat full content')
  * #902: Updated Polish translation
  * #893: Update of bookmarking sites
  * #888: Changes required for Flathub
  * #882: Implement support for Webkits Intelligent Tracking Protection
  * #875: Add &lt;Ctrl&gt;-0 hotkey to reset zoom
  * #874: Add debug printing of SAX parser errors
  * #846: Remove deprecated usage of gdk_screen_*
  * #844: Update metainfo path (appdata target directory)
  * #776: CSS color update on theme change without restart
  * Fixes #883: Feed with comments: last comment replaces all content
  * Fixes #866: Bad encoding in doc/html/reference_de.html
  * Fixes #865: Fixes view mode switch
  * Fixes #841: Now shows progress bar when loading websites
  * Fixes #828: Crashing with segfault after opening feed articles
  * Fixes XLST exception on mediarss feeds with description
  * Drop blogChannel namespace support
  * Support multi-feed discovery
  * Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed
  * Drop CDF channel legacy support
  * Drop Atom 0.2/0.3 (aka Pie) legacy support
  * #893: Added Persion default feed list
  * #890: Update of Indionesian translation
  * #890: Update of French translation
  * #846, #864, #735: Fix main menu/toolbar not being translated
  * #854: Adding new search folder options to match subscription source ULR and parent folder name.
  * #851: Add accessibility check to code tests
  * #851: Fix accessibility annotations for several combo boxes.
  * #850: Fix embedded youtube video bug.
  * #765: Embed YouTube videos from MediaRSS feeds
  * #749: Add Readability.js library (Apache 2.0 licensed) and auto-apply Readability.js to all headlines
  * Drop unused glade/google_source.ui
  * Drop support of combined view mode, this is necessary to add rich content support which relies on DOM transformation and Readability.js
  * Drop ns_photo support, as it is rarely used and allows us to get rid of XSLT extra handling
  * #747: Font improvements
  * #250 Update some dialog labels
  * #803: Fix legacy links to mailing list and IRC in documentation.
  * Updated German translation
  * #861: Updated Spanish translation
  * Fixes #840: OPML source subfolders not working
  * #837: Removing GTimeVal references
  * #827: Respect global update refresh interval for TheOldReader
  * #826: Fix save/restore position issues with tray icon
  * #822: Improve performance of item list loading
  * Fixes #821: Skip current item when finding next unread item
  * #815: Add support for subscribing to HTML5 websites without RSS/Atom feeds by extracting article titles,links and descriptions
  * #816: Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view. Also add favicon URL discovery tests.
  * Fixes #821: Skip current selected unread item on 'next unread item'
  * #800: Expose remove-item action for plugins
  * Fixes #799: plugins/headerbar.py translations not active
  * Fixes #783: Update IS_STATE when update item in itemlistview
  * #752: Trayicon plugin has now a configuration option to change the behaviour when closing Liferea.
  * Fixes #693: Add trayicon plugin option to disable minimizing to tray
  * #764: Add MediaRSS support (e.g. Youtube feeds) to display descriptions and thumbnails
  * #773: Add WebKit Inspector menu option to HTML view when run with --debug-html (by sillyslux)
  * #714: Replaces deprecated gtk_menu_popup
  * #705: New hotkey Ctrl-O to open enclosures
  * #680: Add xdg-email command to item list popup menu
  * Drop unused glade/google_source.ui
  * #699: Refactoring of duplicate check handlingg
  * #746: Fix accessibility fatals reported by gla11y
  * Fixes #730: "Update all subscriptions at startup" overrides "Don't update this feed automatically"
  * Fixes #639: Right clicking on article no longer selects it
  * #737: Update of Italian translation
  * #745: URL fix for French example feeds
  * Update inline docs on headline view modes</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1626177600">- Fix missing python3-gobject-Gdk runtime dependency (boo#1187936)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1642075200">- Require python3-cairo; needed for tray icon (boo#1193579).</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1673784000">- Update to version 1.14.0
  + New 'Reader mode' preference that allows stripping all web
    content
  + Implement support for Webkits Intelligent Tracking Protection
  + New progress bar when loading websites
  + Youtube videos from media:video can be embedded now with a
    click on the video preview picture.
  + Changes to UserAgent handling: same UA is now used for both
    feed fetching and internal browsing.
  + New view mode 'Automatic' which switches between 'Normal' and
    'Wide' mode based on the window proportions.
  + Liferea now supports the new GTK dark theme logic, where in
    the GTK/GNOME preferences you define wether you "prefer" dark
    mode or light mode
  + Favicon discovery improvements: now detects all types of Apple
    Touch Icons, MS Tile Images and Safari Mask Icons
  + Increase size of stored favicons to 128x128px to improve icon
    quality in 3-pane wide view.
  + Make several plugins support gettext
  + Allow mutiple feed in same libnotify notification
  + Redesign of the update message in the status bar. It now shows
    a update counter of the feeds being in update.
  + You can now export a feed to XML file
  + Added an option to show news bins in reduced feed list
  + Added menu option to send item per mail
  + Default to https:// instead of http:// when user doesn't
    provide protocol on subscribing feed
  + Implement support for subscribing to LD+Json metadata listings
    e.g. concert or theater event listings
  + Implement support for subscribing to HTML5 websites
  + Support for media:description field of Youtube feeds
  + Improve HTML5 extraction: extract main tag if it exists and
    no article was found.
  + Execute feed pipe/filter commands asynchronously
  + Better explanation of feed update errors.
  + Added generic Google Reader API support (allows using FeedHQ,
    FreshRSS, Miniflux...)
  + Now allow converting TinyTinyRSS subscriptions to
    local subscriptions
  + New search folder rule to match podcasts
  + New search folder rule to match headline authors
  + New search folder rule to match subscription source
  + New search folder rule to match parent folder name
  + New search folder property that allows hiding read items
  + Now search folders are automatically rebuild when rules are
    changed
  + Added new plugin 'add-bookmark-site' that allows to configure
    a custom bookmarking site.
  + Added new plugin 'getfocus' that adds transparency on the feed
    list when it is not focussed.
  + Trayicon plugin has now a configuration option to change the
    behaviour when closing Liferea.
  + Trayicon plugin has now an option to disable minimizing to tray
  + New hot key Ctrl-D for 'Open in External Browser'
  + New hot key F10 for headerbar plugin to allow triggering the
    hamburger menu
  + New hot key Ctrl-0 to reset zoom
  + New hot key Ctrl-O to open enclosures
  + Fix hidden panes, Liferea will never allow the panes to be
    smaller than 5% in height or width
  + Wait for network to be fully available before updating
  + 2-pane mode was removed
  + Dropped CDF channel support
  + Dropped Atom 0.2/0.3 (aka Pie) support
  + Dropped blogChannel namespace support
  + Dropped photo namespace support
- Add libtool BuildRequires and run autogen.sh: the tarball is an
  unbootstrapped git archive.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674216000">- Use the properly boostrapped release tarball from upstream.
- Drop libtool BuildRequires and no longer run autogen.sh.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1678708800">- Update to version 1.14.1:
  + Fix CVE-2023-1350 - Remote code execution on feed enrichment
    (boo#1209190).</changelog>
</package>
<package pkgid="2311f4c48008fb18d5557c52e6e14a4c5d7a59de87e368ba59ead05e7c8bd016" name="liferea-debugsource" arch="i586">
  <version epoch="0" ver="1.14.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414497600">- Update to version 1.10.12 (boo#906687):
  + Fix gh#lwindolf/liferea#86: Support HTTP content negotiation
  + Fix gh#lwindolf/liferea#98: Stop calling Atom person
    constructs w/ URI invalid
  + Fix gh#lwindolf/liferea#100: Problems with dark Adwaita theme
    in GTK 3.14
- Changes from versions 1.10.6 through 1.10.11:
  + See ChangeLog file
    (/usr/share/doc/packages/liferea/ChangeLog).</changelog>
  <changelog author="badshah400@gmail.com" date="1425211200">- Update to version 1.10.14 (boo#916784):
  + Fix gh#lwindolf/liferea#154: Crashes while starting (on
    corrupt icon).
  + Fix gh#lwindolf/liferea#134: Broken default news feed.
  + Fix gh#lwindolf/liferea#122: Crashes at launch,
    "segmentation fault".
  + Fix some memory leaks.
  + Fix gh#lwindolf/liferea#145: Wrong method triggered on
    'Launch External'.
  + Fix gh#lwindolf/liferea#149: Fixes a random crash on startup.
- Changes from version 1.10.13:
  + Fix gh#lwindolf/liferea#112: Wrapping issue in folder display.
  + Fix gh#lwindolf/liferea#114: Avoid termination on UTF-8
    validation error.
  + Fix gh#lwindolf/liferea#132: Broken link in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455969600">- Update to version 1.10.18:
  + Fix gh#lwindolf/liferea#287: media:content support broken.
  + Fix gh#lwindolf/liferea#279: Rules not visible in searchdialog.
  + Fix gh#lwindolf/liferea#83: Segfault when sorting feeds in
    folder.
  + Fix gh#lwindolf/liferea#302: Broken compilation with
  - -disable-notify.
- Changes from version 1.10.17:
  + Fix gh#lwindolf/liferea#194: Add source dialog visually broken.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on
    enclosure download.
  + Fix gh#lwindolf/liferea#223: Search folder dialog don't show
    rules.
  + Fix gh#lwindolf/liferea#227: Preference dialog fails to load
    with latest GtkBuilder.
  + Fix gh#lwindolf/liferea#234: Segmentation fault upon attempting
    to add an OPML.
  + Fix compilation error when there is no libnotify.
  + Added debugging for gh#lwindolf/liferea#258: Dialog loading
    issues.
- Changes from version 1.10.16:
  + Added "Do Not Track" support (enabled per default).
  + Added x-scheme-handler/feed to desktop file.
  + Add image icons to plugins.
  + Enable tests for parsing RFC822 dates with 2 digit year.
  + Fix gh#lwindolf/liferea#78: Shaky text in feed list.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on enclose
    download.
  + Fix gh#lwindolf/liferea#198: Traceback on popup notifications.
  + Fix gh#lwindolf/liferea#216: Untranslatable strings.
  + Fix gh#lwindolf/liferea#256: PyGIWarnings on loading plugins.
- Changes from version 1.10.15:
  + Implement full screen mode for videos.
  + Fix gh#lwindolf/liferea#32: Prevent erroneous "Mark all as
    read".
  + Improves gh#lwindolf/liferea#36, gh#lwindolf/liferea#113: UI
    lock up during refresh.
  + Fix gh#lwindolf/liferea#180: Removing item from (v)folder marks
    all read.
  + Fix gh#lwindolf/liferea#140, #158: Vertical pane placement is
    forgotten.
  + Fix gh#lwindolf/liferea#182: Missing config.h include in
    date.c.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 1.10.19:
  + Fixes gh#lwindolf/liferea#317: Compilation problems in 1.10.18
    release.
  + Fixes gh#lwindolf/liferea#73: Problem with updating favicons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 1.11.7:
  + Add support for media:group.
  + Fix issues with media:content.
  + Bad .desktop categories definition.
  + Fix rules no visible in searchdialog.
  + "Download" tab in Tools/Preferences.
  + Segfault when sorting feeds in folder.
  + Updated manpage.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.12~rc3:
  + Fix GtkDoc warnings.
  + Filter commands are not asynchronous.
  + Missing space above internal browser address bar.
  + All "Unread" search folder items marked read at once.
  + Liferea does not always use theme icons when it is launched on
    system startup.
  + Updated translations.
- Changes from version 1.12~rc2:
  + Change all g_warnings() to g_print() for remote source to avoid
    "crashing" on errors.
  + Reorganized all UI definitions in separate files to simplify
    GtkBuilder handling.
  + Add GeoRSS info and map link in item header.
  + Replacing deprecated elements in preferences.
  + Create LifereaApplication type.
  + Partial RFC3229+feed support for bandwidth savings.
  + gtk_tree_store_get_path: assertion
    'iter-&gt;stamp == priv-&gt;stamp'.
  + Leftover OSM XSLT in item view.
  + Internal browser shows files system on go-back.
  + Updated translations.
- Changes from version 1.12~rc1:
  + Switch to webkit2gtk3.
  + Support for Do-Not-Track.
  + Improved trayicon plugin.
  + Support for Reedah and InoReader.
  + Support for categories in TheOldReader.
  + Simplified handling of external browsers.
- Replace pkgconfig(webkitgtk-3.0) with pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Change license to 'GPL-2.0' in place of 'GPL-2.0+':
  src/debug.[c|h]) does not specify 'or higher'.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Update to version 1.12.1:
  + Fix Lintian spelling errors.
  + Appstream data has new format.
  + Fix doesn't remember some sort orders.
  + Fix assertions/crashes on changing view layouts.
  + Workaround to avoid GtkPaned shrinking.
  + Updated translations.
- Changes from version 1.12.0:
  + Fixes unhiding from tray icon when activated via GApplication.
  + Reorder columns in 'Normal' email-like view to have the date
    column always at the end.
  + Add plugin to make unread feeds titles bold.
  + Workaround Liferea deanonymize Tor.
  + Resize both panes in normal and wide view.
  + Toggle_visibility() does not make a minimized window visible
    again.
  + Segfault when switching feed in combined view.
  + Handling of relative URLs in Atom parser.
  + Added 'View Image' context menu option in HTML view.
  + Dropped del.icio.us from social bookmarking options as it is a
    read-only service now.
  + Redesign of the wide view mode: larger titles with small text
    teasers.
  + Added optional AMP/HTML5 content enrichment feature.
  + Updated translations.
- Conditionalize handling of desktop_database_post(un),
  icon_theme_cache_post(un) and glib2_gsettings_schema_postun in
  post(un) to only apply for old versions of openSUSE.
- Clean up spec, drop obsolete clean section.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568289600">- Update to version 1.12.6:
  * #658: Add confirmation dialog when adding duplicate subscription
  * Fixes #689: When resuming from sleep feeds were being fetched
    before Wifi came up
  * Fixes #685: Headerbar plugin "Mark All Read" button is not
    feed-specific
  * Fixes #549: Scrollbars not always present in the headline area
  * Fixes #543: Next update overrides HTML5 enrichment
  * Fixes overly wide label in enclosure preferences dialog
  * Dropped unencrypted warning from auth dialog (not true anymore)
  * #688: Adding translatable tooltips for the headerbar plugin
  * #665: Webkit browser now supplies 'Liferea' component in
    user agent
  * #664: Added "Mark All As Read" button to headerbar plugin
  * #620: Added flatpak JSON
  * #579: Added item list column drag and drop reordering
  * #436, #662: Move from GnomeKeyring to libsecret
  * Fixes #663: Correct instapaper sharing link
  * Fixes #661: Update sharing links
  * Fixes #271: Consistent over usage of CPU (trigger by
    "Next Unread" loop)
  * #472, #632: Dropping Inoreader support (API broke)
  * Fixes #660: Added installable plugin to change accels
  * Fixes #654: Segfault on date out of range
  * Fixes #651: Fixes Free Music Archive link in default OPMLs
  * Fixes #649: Switch from persistent to session-only cookies
  * Fixes #645, #646: unread count of vfolder
  * Fixes #637: Extra keywords in .desktop file
    (syndication; rss; atom)
  * Fixes #557: Updating counters for remote sources
  * Updated cookie usage hint in FAQ
  * #634: Added setting for custom download commands
  * #614: GTK Headerbar support via plugin
  * #608: Refactoring UI code to switch to GAction and GtkBuilder
  * Note: this implies not having icons in the main menu anymore
  * which were still there for all non-GNOME users (see #626).
  * #589: Item list view column order rework as a preparation
    for possible real column drag&amp;drop. Introduces a new
    DConf setting for the column order.
  * Fixes #280: Mark read toolbar button always disabled for
    search folders
  * Fixes #591: Please add a safety question when
    "marking all read"
  * Fixes #625: Avoid exception in trayicon.py
  * Fixes #627: GnomeKeyring plugin fails to activate when
    keyring doesn't exist
  * Fixes #630: Fix feed list selection after DnD
  * Fixes #633: Big Memory leak in date code
  * Adding a plugin installer plugin that allows discovering
    and automatically installing 3rd party plugins
  * #585: Drop language from user agent to increase privacy
  * #583: Add transmission-gtk and aria2 as download tool options
  * #495: New command line option --disable-plugins (-p) to start
    with all plugins disabled.
  * Fixes #610: Liferea not showing up in GNOME Software
  * Fixes #604: Correctly print error message when failing to
    unlock GNOME keyring
  * Fixes #602: CSS style for GTK link colors not used
  * Fixes #581: Redirect location updates and adds HTTP 308
    (RFC 7538) support
  * Fixes #578: Unable to set unread items in bold
  * #584: Fixes broken OPML feed list entries
  * #577: Fixes newsbin doc typo
  * #584: Added Norwegian feed list
  * Translation updates
- rebase liferea-openSUSE-feeds.patch
- fixes boo#1150009</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1578916800">- Add export WEBKIT_DISABLE_COMPOSITING_MODE=1 as workaround for
  Factory build failure
  (https://github.com/lwindolf/liferea/issues/767)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1589457600">- Export WEBKIT_DISABLE_COMPOSITING_MODE=1 on Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1591963200">- Update to version 1.12.8:
  * Fixes #734: crash when selecting empty nodes
  * Fixes #727: Out-dated documentation on Firefox live bookmarks
  * Fixes headline large images/videos or images with margins
    causing horizontal scrolling in headline view
  * Fixes #840: OPML source subfolders not working
  * Update of French translation</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to version 1.12.9:
  * Fix embedded youtube video bug
  * Fix translations not applied to application menu bar and tool bar</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1620475200">- Update to version 1.13.6:
  * Change reader mode toggle from item view icon to toggle entry in item view context menu.
  * #343: UX redesign of the update message in the status bar. Now shows a update counter of the feeds being in update.
  * #964: Added pane position fix plugin providing a workaround for pane position issues when using the headerbar
  * #983: Use GtkFileChooserNative to allow selecting local files when run in sandbox.
  * Fixes #780: Improve date formatting when in locale en_GB
  * Fixes #944: Broken RTL text direction in feed content view
  * Fixes #949: Regression in notification plugin that caused it to show non-new items
  * Fixes #963: Checking for git command in plugin installer -&gt; warn user
  * Fixes #973: Broken CSS in Webkit2Gtk &gt;= 2.32
  * Updated Albanian translation
  * Updated French translation
  * Updated Italian translation
  * Updated German translation
  * #907: Add new search folder property that allows hiding read items
  * Now always shows the unread count of a search folder (instead of the item count) in the feed list
  * Now search folders are automatically rebuild when rules are changed
  * Adds a new simple focus plugin that adds transparency on the feed list when it is not focussed.
  * Add F10 hotkey to headerbar plugin to allow triggering the hamburger menu
  * Update Flatpak AppData with release dates
  * Make several plugins support gettext
  * Fixes #192: wrong button order of media player in RTL locales
  * Fixes #343: Usability of update infos in status bar. Now a total count is displayed on mass-updates and a per-feed info on single feed updates
  * Fixes #809: Usability of feed fetching errors.
  * Updated Polish translation
  * Updated German translation
  * Prevent endless loop on favicon discovery
  * #903: Prevent endless loop in feed autodiscovery
  * #912: Allow mutiple feed in same libnotify notification
  * Further favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons Fixes #440
  * Add reader mode toggle in the item view
  * #876 Add reader mode preference
  * Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings
  * Provide the default icon for feeds with no favicon as SVG for nicer rendering in wide view. Drop some unused icons. Replace tray icon with scalable version.
  * Fixes CRITICAL on trayicon plugin init
  * Fixes #884: Content of wrong feed is shown
  * Fixes #900: Flatpak needs icon named after appid
  * Fixes #908, #332: Search folder are not case-insensitive as documented
  * Fixes #899: Truncated articles (on 'Extrat full content')
  * #902: Updated Polish translation
  * #893: Update of bookmarking sites
  * #888: Changes required for Flathub
  * #882: Implement support for Webkits Intelligent Tracking Protection
  * #875: Add &lt;Ctrl&gt;-0 hotkey to reset zoom
  * #874: Add debug printing of SAX parser errors
  * #846: Remove deprecated usage of gdk_screen_*
  * #844: Update metainfo path (appdata target directory)
  * #776: CSS color update on theme change without restart
  * Fixes #883: Feed with comments: last comment replaces all content
  * Fixes #866: Bad encoding in doc/html/reference_de.html
  * Fixes #865: Fixes view mode switch
  * Fixes #841: Now shows progress bar when loading websites
  * Fixes #828: Crashing with segfault after opening feed articles
  * Fixes XLST exception on mediarss feeds with description
  * Drop blogChannel namespace support
  * Support multi-feed discovery
  * Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed
  * Drop CDF channel legacy support
  * Drop Atom 0.2/0.3 (aka Pie) legacy support
  * #893: Added Persion default feed list
  * #890: Update of Indionesian translation
  * #890: Update of French translation
  * #846, #864, #735: Fix main menu/toolbar not being translated
  * #854: Adding new search folder options to match subscription source ULR and parent folder name.
  * #851: Add accessibility check to code tests
  * #851: Fix accessibility annotations for several combo boxes.
  * #850: Fix embedded youtube video bug.
  * #765: Embed YouTube videos from MediaRSS feeds
  * #749: Add Readability.js library (Apache 2.0 licensed) and auto-apply Readability.js to all headlines
  * Drop unused glade/google_source.ui
  * Drop support of combined view mode, this is necessary to add rich content support which relies on DOM transformation and Readability.js
  * Drop ns_photo support, as it is rarely used and allows us to get rid of XSLT extra handling
  * #747: Font improvements
  * #250 Update some dialog labels
  * #803: Fix legacy links to mailing list and IRC in documentation.
  * Updated German translation
  * #861: Updated Spanish translation
  * Fixes #840: OPML source subfolders not working
  * #837: Removing GTimeVal references
  * #827: Respect global update refresh interval for TheOldReader
  * #826: Fix save/restore position issues with tray icon
  * #822: Improve performance of item list loading
  * Fixes #821: Skip current item when finding next unread item
  * #815: Add support for subscribing to HTML5 websites without RSS/Atom feeds by extracting article titles,links and descriptions
  * #816: Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view. Also add favicon URL discovery tests.
  * Fixes #821: Skip current selected unread item on 'next unread item'
  * #800: Expose remove-item action for plugins
  * Fixes #799: plugins/headerbar.py translations not active
  * Fixes #783: Update IS_STATE when update item in itemlistview
  * #752: Trayicon plugin has now a configuration option to change the behaviour when closing Liferea.
  * Fixes #693: Add trayicon plugin option to disable minimizing to tray
  * #764: Add MediaRSS support (e.g. Youtube feeds) to display descriptions and thumbnails
  * #773: Add WebKit Inspector menu option to HTML view when run with --debug-html (by sillyslux)
  * #714: Replaces deprecated gtk_menu_popup
  * #705: New hotkey Ctrl-O to open enclosures
  * #680: Add xdg-email command to item list popup menu
  * Drop unused glade/google_source.ui
  * #699: Refactoring of duplicate check handlingg
  * #746: Fix accessibility fatals reported by gla11y
  * Fixes #730: "Update all subscriptions at startup" overrides "Don't update this feed automatically"
  * Fixes #639: Right clicking on article no longer selects it
  * #737: Update of Italian translation
  * #745: URL fix for French example feeds
  * Update inline docs on headline view modes</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1626177600">- Fix missing python3-gobject-Gdk runtime dependency (boo#1187936)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1642075200">- Require python3-cairo; needed for tray icon (boo#1193579).</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1673784000">- Update to version 1.14.0
  + New 'Reader mode' preference that allows stripping all web
    content
  + Implement support for Webkits Intelligent Tracking Protection
  + New progress bar when loading websites
  + Youtube videos from media:video can be embedded now with a
    click on the video preview picture.
  + Changes to UserAgent handling: same UA is now used for both
    feed fetching and internal browsing.
  + New view mode 'Automatic' which switches between 'Normal' and
    'Wide' mode based on the window proportions.
  + Liferea now supports the new GTK dark theme logic, where in
    the GTK/GNOME preferences you define wether you "prefer" dark
    mode or light mode
  + Favicon discovery improvements: now detects all types of Apple
    Touch Icons, MS Tile Images and Safari Mask Icons
  + Increase size of stored favicons to 128x128px to improve icon
    quality in 3-pane wide view.
  + Make several plugins support gettext
  + Allow mutiple feed in same libnotify notification
  + Redesign of the update message in the status bar. It now shows
    a update counter of the feeds being in update.
  + You can now export a feed to XML file
  + Added an option to show news bins in reduced feed list
  + Added menu option to send item per mail
  + Default to https:// instead of http:// when user doesn't
    provide protocol on subscribing feed
  + Implement support for subscribing to LD+Json metadata listings
    e.g. concert or theater event listings
  + Implement support for subscribing to HTML5 websites
  + Support for media:description field of Youtube feeds
  + Improve HTML5 extraction: extract main tag if it exists and
    no article was found.
  + Execute feed pipe/filter commands asynchronously
  + Better explanation of feed update errors.
  + Added generic Google Reader API support (allows using FeedHQ,
    FreshRSS, Miniflux...)
  + Now allow converting TinyTinyRSS subscriptions to
    local subscriptions
  + New search folder rule to match podcasts
  + New search folder rule to match headline authors
  + New search folder rule to match subscription source
  + New search folder rule to match parent folder name
  + New search folder property that allows hiding read items
  + Now search folders are automatically rebuild when rules are
    changed
  + Added new plugin 'add-bookmark-site' that allows to configure
    a custom bookmarking site.
  + Added new plugin 'getfocus' that adds transparency on the feed
    list when it is not focussed.
  + Trayicon plugin has now a configuration option to change the
    behaviour when closing Liferea.
  + Trayicon plugin has now an option to disable minimizing to tray
  + New hot key Ctrl-D for 'Open in External Browser'
  + New hot key F10 for headerbar plugin to allow triggering the
    hamburger menu
  + New hot key Ctrl-0 to reset zoom
  + New hot key Ctrl-O to open enclosures
  + Fix hidden panes, Liferea will never allow the panes to be
    smaller than 5% in height or width
  + Wait for network to be fully available before updating
  + 2-pane mode was removed
  + Dropped CDF channel support
  + Dropped Atom 0.2/0.3 (aka Pie) support
  + Dropped blogChannel namespace support
  + Dropped photo namespace support
- Add libtool BuildRequires and run autogen.sh: the tarball is an
  unbootstrapped git archive.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674216000">- Use the properly boostrapped release tarball from upstream.
- Drop libtool BuildRequires and no longer run autogen.sh.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1678708800">- Update to version 1.14.1:
  + Fix CVE-2023-1350 - Remote code execution on feed enrichment
    (boo#1209190).</changelog>
</package>
<package pkgid="1b0bb194abc4e8a7c21e9234a97f000efc6ddcbbea3020d700611faab4c7bcbf" name="liferea-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.14.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414497600">- Update to version 1.10.12 (boo#906687):
  + Fix gh#lwindolf/liferea#86: Support HTTP content negotiation
  + Fix gh#lwindolf/liferea#98: Stop calling Atom person
    constructs w/ URI invalid
  + Fix gh#lwindolf/liferea#100: Problems with dark Adwaita theme
    in GTK 3.14
- Changes from versions 1.10.6 through 1.10.11:
  + See ChangeLog file
    (/usr/share/doc/packages/liferea/ChangeLog).</changelog>
  <changelog author="badshah400@gmail.com" date="1425211200">- Update to version 1.10.14 (boo#916784):
  + Fix gh#lwindolf/liferea#154: Crashes while starting (on
    corrupt icon).
  + Fix gh#lwindolf/liferea#134: Broken default news feed.
  + Fix gh#lwindolf/liferea#122: Crashes at launch,
    "segmentation fault".
  + Fix some memory leaks.
  + Fix gh#lwindolf/liferea#145: Wrong method triggered on
    'Launch External'.
  + Fix gh#lwindolf/liferea#149: Fixes a random crash on startup.
- Changes from version 1.10.13:
  + Fix gh#lwindolf/liferea#112: Wrapping issue in folder display.
  + Fix gh#lwindolf/liferea#114: Avoid termination on UTF-8
    validation error.
  + Fix gh#lwindolf/liferea#132: Broken link in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455969600">- Update to version 1.10.18:
  + Fix gh#lwindolf/liferea#287: media:content support broken.
  + Fix gh#lwindolf/liferea#279: Rules not visible in searchdialog.
  + Fix gh#lwindolf/liferea#83: Segfault when sorting feeds in
    folder.
  + Fix gh#lwindolf/liferea#302: Broken compilation with
  - -disable-notify.
- Changes from version 1.10.17:
  + Fix gh#lwindolf/liferea#194: Add source dialog visually broken.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on
    enclosure download.
  + Fix gh#lwindolf/liferea#223: Search folder dialog don't show
    rules.
  + Fix gh#lwindolf/liferea#227: Preference dialog fails to load
    with latest GtkBuilder.
  + Fix gh#lwindolf/liferea#234: Segmentation fault upon attempting
    to add an OPML.
  + Fix compilation error when there is no libnotify.
  + Added debugging for gh#lwindolf/liferea#258: Dialog loading
    issues.
- Changes from version 1.10.16:
  + Added "Do Not Track" support (enabled per default).
  + Added x-scheme-handler/feed to desktop file.
  + Add image icons to plugins.
  + Enable tests for parsing RFC822 dates with 2 digit year.
  + Fix gh#lwindolf/liferea#78: Shaky text in feed list.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on enclose
    download.
  + Fix gh#lwindolf/liferea#198: Traceback on popup notifications.
  + Fix gh#lwindolf/liferea#216: Untranslatable strings.
  + Fix gh#lwindolf/liferea#256: PyGIWarnings on loading plugins.
- Changes from version 1.10.15:
  + Implement full screen mode for videos.
  + Fix gh#lwindolf/liferea#32: Prevent erroneous "Mark all as
    read".
  + Improves gh#lwindolf/liferea#36, gh#lwindolf/liferea#113: UI
    lock up during refresh.
  + Fix gh#lwindolf/liferea#180: Removing item from (v)folder marks
    all read.
  + Fix gh#lwindolf/liferea#140, #158: Vertical pane placement is
    forgotten.
  + Fix gh#lwindolf/liferea#182: Missing config.h include in
    date.c.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 1.10.19:
  + Fixes gh#lwindolf/liferea#317: Compilation problems in 1.10.18
    release.
  + Fixes gh#lwindolf/liferea#73: Problem with updating favicons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 1.11.7:
  + Add support for media:group.
  + Fix issues with media:content.
  + Bad .desktop categories definition.
  + Fix rules no visible in searchdialog.
  + "Download" tab in Tools/Preferences.
  + Segfault when sorting feeds in folder.
  + Updated manpage.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.12~rc3:
  + Fix GtkDoc warnings.
  + Filter commands are not asynchronous.
  + Missing space above internal browser address bar.
  + All "Unread" search folder items marked read at once.
  + Liferea does not always use theme icons when it is launched on
    system startup.
  + Updated translations.
- Changes from version 1.12~rc2:
  + Change all g_warnings() to g_print() for remote source to avoid
    "crashing" on errors.
  + Reorganized all UI definitions in separate files to simplify
    GtkBuilder handling.
  + Add GeoRSS info and map link in item header.
  + Replacing deprecated elements in preferences.
  + Create LifereaApplication type.
  + Partial RFC3229+feed support for bandwidth savings.
  + gtk_tree_store_get_path: assertion
    'iter-&gt;stamp == priv-&gt;stamp'.
  + Leftover OSM XSLT in item view.
  + Internal browser shows files system on go-back.
  + Updated translations.
- Changes from version 1.12~rc1:
  + Switch to webkit2gtk3.
  + Support for Do-Not-Track.
  + Improved trayicon plugin.
  + Support for Reedah and InoReader.
  + Support for categories in TheOldReader.
  + Simplified handling of external browsers.
- Replace pkgconfig(webkitgtk-3.0) with pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Change license to 'GPL-2.0' in place of 'GPL-2.0+':
  src/debug.[c|h]) does not specify 'or higher'.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Update to version 1.12.1:
  + Fix Lintian spelling errors.
  + Appstream data has new format.
  + Fix doesn't remember some sort orders.
  + Fix assertions/crashes on changing view layouts.
  + Workaround to avoid GtkPaned shrinking.
  + Updated translations.
- Changes from version 1.12.0:
  + Fixes unhiding from tray icon when activated via GApplication.
  + Reorder columns in 'Normal' email-like view to have the date
    column always at the end.
  + Add plugin to make unread feeds titles bold.
  + Workaround Liferea deanonymize Tor.
  + Resize both panes in normal and wide view.
  + Toggle_visibility() does not make a minimized window visible
    again.
  + Segfault when switching feed in combined view.
  + Handling of relative URLs in Atom parser.
  + Added 'View Image' context menu option in HTML view.
  + Dropped del.icio.us from social bookmarking options as it is a
    read-only service now.
  + Redesign of the wide view mode: larger titles with small text
    teasers.
  + Added optional AMP/HTML5 content enrichment feature.
  + Updated translations.
- Conditionalize handling of desktop_database_post(un),
  icon_theme_cache_post(un) and glib2_gsettings_schema_postun in
  post(un) to only apply for old versions of openSUSE.
- Clean up spec, drop obsolete clean section.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568289600">- Update to version 1.12.6:
  * #658: Add confirmation dialog when adding duplicate subscription
  * Fixes #689: When resuming from sleep feeds were being fetched
    before Wifi came up
  * Fixes #685: Headerbar plugin "Mark All Read" button is not
    feed-specific
  * Fixes #549: Scrollbars not always present in the headline area
  * Fixes #543: Next update overrides HTML5 enrichment
  * Fixes overly wide label in enclosure preferences dialog
  * Dropped unencrypted warning from auth dialog (not true anymore)
  * #688: Adding translatable tooltips for the headerbar plugin
  * #665: Webkit browser now supplies 'Liferea' component in
    user agent
  * #664: Added "Mark All As Read" button to headerbar plugin
  * #620: Added flatpak JSON
  * #579: Added item list column drag and drop reordering
  * #436, #662: Move from GnomeKeyring to libsecret
  * Fixes #663: Correct instapaper sharing link
  * Fixes #661: Update sharing links
  * Fixes #271: Consistent over usage of CPU (trigger by
    "Next Unread" loop)
  * #472, #632: Dropping Inoreader support (API broke)
  * Fixes #660: Added installable plugin to change accels
  * Fixes #654: Segfault on date out of range
  * Fixes #651: Fixes Free Music Archive link in default OPMLs
  * Fixes #649: Switch from persistent to session-only cookies
  * Fixes #645, #646: unread count of vfolder
  * Fixes #637: Extra keywords in .desktop file
    (syndication; rss; atom)
  * Fixes #557: Updating counters for remote sources
  * Updated cookie usage hint in FAQ
  * #634: Added setting for custom download commands
  * #614: GTK Headerbar support via plugin
  * #608: Refactoring UI code to switch to GAction and GtkBuilder
  * Note: this implies not having icons in the main menu anymore
  * which were still there for all non-GNOME users (see #626).
  * #589: Item list view column order rework as a preparation
    for possible real column drag&amp;drop. Introduces a new
    DConf setting for the column order.
  * Fixes #280: Mark read toolbar button always disabled for
    search folders
  * Fixes #591: Please add a safety question when
    "marking all read"
  * Fixes #625: Avoid exception in trayicon.py
  * Fixes #627: GnomeKeyring plugin fails to activate when
    keyring doesn't exist
  * Fixes #630: Fix feed list selection after DnD
  * Fixes #633: Big Memory leak in date code
  * Adding a plugin installer plugin that allows discovering
    and automatically installing 3rd party plugins
  * #585: Drop language from user agent to increase privacy
  * #583: Add transmission-gtk and aria2 as download tool options
  * #495: New command line option --disable-plugins (-p) to start
    with all plugins disabled.
  * Fixes #610: Liferea not showing up in GNOME Software
  * Fixes #604: Correctly print error message when failing to
    unlock GNOME keyring
  * Fixes #602: CSS style for GTK link colors not used
  * Fixes #581: Redirect location updates and adds HTTP 308
    (RFC 7538) support
  * Fixes #578: Unable to set unread items in bold
  * #584: Fixes broken OPML feed list entries
  * #577: Fixes newsbin doc typo
  * #584: Added Norwegian feed list
  * Translation updates
- rebase liferea-openSUSE-feeds.patch
- fixes boo#1150009</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1578916800">- Add export WEBKIT_DISABLE_COMPOSITING_MODE=1 as workaround for
  Factory build failure
  (https://github.com/lwindolf/liferea/issues/767)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1589457600">- Export WEBKIT_DISABLE_COMPOSITING_MODE=1 on Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1591963200">- Update to version 1.12.8:
  * Fixes #734: crash when selecting empty nodes
  * Fixes #727: Out-dated documentation on Firefox live bookmarks
  * Fixes headline large images/videos or images with margins
    causing horizontal scrolling in headline view
  * Fixes #840: OPML source subfolders not working
  * Update of French translation</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to version 1.12.9:
  * Fix embedded youtube video bug
  * Fix translations not applied to application menu bar and tool bar</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1620475200">- Update to version 1.13.6:
  * Change reader mode toggle from item view icon to toggle entry in item view context menu.
  * #343: UX redesign of the update message in the status bar. Now shows a update counter of the feeds being in update.
  * #964: Added pane position fix plugin providing a workaround for pane position issues when using the headerbar
  * #983: Use GtkFileChooserNative to allow selecting local files when run in sandbox.
  * Fixes #780: Improve date formatting when in locale en_GB
  * Fixes #944: Broken RTL text direction in feed content view
  * Fixes #949: Regression in notification plugin that caused it to show non-new items
  * Fixes #963: Checking for git command in plugin installer -&gt; warn user
  * Fixes #973: Broken CSS in Webkit2Gtk &gt;= 2.32
  * Updated Albanian translation
  * Updated French translation
  * Updated Italian translation
  * Updated German translation
  * #907: Add new search folder property that allows hiding read items
  * Now always shows the unread count of a search folder (instead of the item count) in the feed list
  * Now search folders are automatically rebuild when rules are changed
  * Adds a new simple focus plugin that adds transparency on the feed list when it is not focussed.
  * Add F10 hotkey to headerbar plugin to allow triggering the hamburger menu
  * Update Flatpak AppData with release dates
  * Make several plugins support gettext
  * Fixes #192: wrong button order of media player in RTL locales
  * Fixes #343: Usability of update infos in status bar. Now a total count is displayed on mass-updates and a per-feed info on single feed updates
  * Fixes #809: Usability of feed fetching errors.
  * Updated Polish translation
  * Updated German translation
  * Prevent endless loop on favicon discovery
  * #903: Prevent endless loop in feed autodiscovery
  * #912: Allow mutiple feed in same libnotify notification
  * Further favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons Fixes #440
  * Add reader mode toggle in the item view
  * #876 Add reader mode preference
  * Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings
  * Provide the default icon for feeds with no favicon as SVG for nicer rendering in wide view. Drop some unused icons. Replace tray icon with scalable version.
  * Fixes CRITICAL on trayicon plugin init
  * Fixes #884: Content of wrong feed is shown
  * Fixes #900: Flatpak needs icon named after appid
  * Fixes #908, #332: Search folder are not case-insensitive as documented
  * Fixes #899: Truncated articles (on 'Extrat full content')
  * #902: Updated Polish translation
  * #893: Update of bookmarking sites
  * #888: Changes required for Flathub
  * #882: Implement support for Webkits Intelligent Tracking Protection
  * #875: Add &lt;Ctrl&gt;-0 hotkey to reset zoom
  * #874: Add debug printing of SAX parser errors
  * #846: Remove deprecated usage of gdk_screen_*
  * #844: Update metainfo path (appdata target directory)
  * #776: CSS color update on theme change without restart
  * Fixes #883: Feed with comments: last comment replaces all content
  * Fixes #866: Bad encoding in doc/html/reference_de.html
  * Fixes #865: Fixes view mode switch
  * Fixes #841: Now shows progress bar when loading websites
  * Fixes #828: Crashing with segfault after opening feed articles
  * Fixes XLST exception on mediarss feeds with description
  * Drop blogChannel namespace support
  * Support multi-feed discovery
  * Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed
  * Drop CDF channel legacy support
  * Drop Atom 0.2/0.3 (aka Pie) legacy support
  * #893: Added Persion default feed list
  * #890: Update of Indionesian translation
  * #890: Update of French translation
  * #846, #864, #735: Fix main menu/toolbar not being translated
  * #854: Adding new search folder options to match subscription source ULR and parent folder name.
  * #851: Add accessibility check to code tests
  * #851: Fix accessibility annotations for several combo boxes.
  * #850: Fix embedded youtube video bug.
  * #765: Embed YouTube videos from MediaRSS feeds
  * #749: Add Readability.js library (Apache 2.0 licensed) and auto-apply Readability.js to all headlines
  * Drop unused glade/google_source.ui
  * Drop support of combined view mode, this is necessary to add rich content support which relies on DOM transformation and Readability.js
  * Drop ns_photo support, as it is rarely used and allows us to get rid of XSLT extra handling
  * #747: Font improvements
  * #250 Update some dialog labels
  * #803: Fix legacy links to mailing list and IRC in documentation.
  * Updated German translation
  * #861: Updated Spanish translation
  * Fixes #840: OPML source subfolders not working
  * #837: Removing GTimeVal references
  * #827: Respect global update refresh interval for TheOldReader
  * #826: Fix save/restore position issues with tray icon
  * #822: Improve performance of item list loading
  * Fixes #821: Skip current item when finding next unread item
  * #815: Add support for subscribing to HTML5 websites without RSS/Atom feeds by extracting article titles,links and descriptions
  * #816: Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view. Also add favicon URL discovery tests.
  * Fixes #821: Skip current selected unread item on 'next unread item'
  * #800: Expose remove-item action for plugins
  * Fixes #799: plugins/headerbar.py translations not active
  * Fixes #783: Update IS_STATE when update item in itemlistview
  * #752: Trayicon plugin has now a configuration option to change the behaviour when closing Liferea.
  * Fixes #693: Add trayicon plugin option to disable minimizing to tray
  * #764: Add MediaRSS support (e.g. Youtube feeds) to display descriptions and thumbnails
  * #773: Add WebKit Inspector menu option to HTML view when run with --debug-html (by sillyslux)
  * #714: Replaces deprecated gtk_menu_popup
  * #705: New hotkey Ctrl-O to open enclosures
  * #680: Add xdg-email command to item list popup menu
  * Drop unused glade/google_source.ui
  * #699: Refactoring of duplicate check handlingg
  * #746: Fix accessibility fatals reported by gla11y
  * Fixes #730: "Update all subscriptions at startup" overrides "Don't update this feed automatically"
  * Fixes #639: Right clicking on article no longer selects it
  * #737: Update of Italian translation
  * #745: URL fix for French example feeds
  * Update inline docs on headline view modes</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1626177600">- Fix missing python3-gobject-Gdk runtime dependency (boo#1187936)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1642075200">- Require python3-cairo; needed for tray icon (boo#1193579).</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1673784000">- Update to version 1.14.0
  + New 'Reader mode' preference that allows stripping all web
    content
  + Implement support for Webkits Intelligent Tracking Protection
  + New progress bar when loading websites
  + Youtube videos from media:video can be embedded now with a
    click on the video preview picture.
  + Changes to UserAgent handling: same UA is now used for both
    feed fetching and internal browsing.
  + New view mode 'Automatic' which switches between 'Normal' and
    'Wide' mode based on the window proportions.
  + Liferea now supports the new GTK dark theme logic, where in
    the GTK/GNOME preferences you define wether you "prefer" dark
    mode or light mode
  + Favicon discovery improvements: now detects all types of Apple
    Touch Icons, MS Tile Images and Safari Mask Icons
  + Increase size of stored favicons to 128x128px to improve icon
    quality in 3-pane wide view.
  + Make several plugins support gettext
  + Allow mutiple feed in same libnotify notification
  + Redesign of the update message in the status bar. It now shows
    a update counter of the feeds being in update.
  + You can now export a feed to XML file
  + Added an option to show news bins in reduced feed list
  + Added menu option to send item per mail
  + Default to https:// instead of http:// when user doesn't
    provide protocol on subscribing feed
  + Implement support for subscribing to LD+Json metadata listings
    e.g. concert or theater event listings
  + Implement support for subscribing to HTML5 websites
  + Support for media:description field of Youtube feeds
  + Improve HTML5 extraction: extract main tag if it exists and
    no article was found.
  + Execute feed pipe/filter commands asynchronously
  + Better explanation of feed update errors.
  + Added generic Google Reader API support (allows using FeedHQ,
    FreshRSS, Miniflux...)
  + Now allow converting TinyTinyRSS subscriptions to
    local subscriptions
  + New search folder rule to match podcasts
  + New search folder rule to match headline authors
  + New search folder rule to match subscription source
  + New search folder rule to match parent folder name
  + New search folder property that allows hiding read items
  + Now search folders are automatically rebuild when rules are
    changed
  + Added new plugin 'add-bookmark-site' that allows to configure
    a custom bookmarking site.
  + Added new plugin 'getfocus' that adds transparency on the feed
    list when it is not focussed.
  + Trayicon plugin has now a configuration option to change the
    behaviour when closing Liferea.
  + Trayicon plugin has now an option to disable minimizing to tray
  + New hot key Ctrl-D for 'Open in External Browser'
  + New hot key F10 for headerbar plugin to allow triggering the
    hamburger menu
  + New hot key Ctrl-0 to reset zoom
  + New hot key Ctrl-O to open enclosures
  + Fix hidden panes, Liferea will never allow the panes to be
    smaller than 5% in height or width
  + Wait for network to be fully available before updating
  + 2-pane mode was removed
  + Dropped CDF channel support
  + Dropped Atom 0.2/0.3 (aka Pie) support
  + Dropped blogChannel namespace support
  + Dropped photo namespace support
- Add libtool BuildRequires and run autogen.sh: the tarball is an
  unbootstrapped git archive.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674216000">- Use the properly boostrapped release tarball from upstream.
- Drop libtool BuildRequires and no longer run autogen.sh.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1678708800">- Update to version 1.14.1:
  + Fix CVE-2023-1350 - Remote code execution on feed enrichment
    (boo#1209190).</changelog>
</package>
<package pkgid="b76641626ae8534a411fedbfd890350ceb802d6a247fd828e8fc106157fc6805" name="liferea-debugsource" arch="s390x">
  <version epoch="0" ver="1.14.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414497600">- Update to version 1.10.12 (boo#906687):
  + Fix gh#lwindolf/liferea#86: Support HTTP content negotiation
  + Fix gh#lwindolf/liferea#98: Stop calling Atom person
    constructs w/ URI invalid
  + Fix gh#lwindolf/liferea#100: Problems with dark Adwaita theme
    in GTK 3.14
- Changes from versions 1.10.6 through 1.10.11:
  + See ChangeLog file
    (/usr/share/doc/packages/liferea/ChangeLog).</changelog>
  <changelog author="badshah400@gmail.com" date="1425211200">- Update to version 1.10.14 (boo#916784):
  + Fix gh#lwindolf/liferea#154: Crashes while starting (on
    corrupt icon).
  + Fix gh#lwindolf/liferea#134: Broken default news feed.
  + Fix gh#lwindolf/liferea#122: Crashes at launch,
    "segmentation fault".
  + Fix some memory leaks.
  + Fix gh#lwindolf/liferea#145: Wrong method triggered on
    'Launch External'.
  + Fix gh#lwindolf/liferea#149: Fixes a random crash on startup.
- Changes from version 1.10.13:
  + Fix gh#lwindolf/liferea#112: Wrapping issue in folder display.
  + Fix gh#lwindolf/liferea#114: Avoid termination on UTF-8
    validation error.
  + Fix gh#lwindolf/liferea#132: Broken link in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455969600">- Update to version 1.10.18:
  + Fix gh#lwindolf/liferea#287: media:content support broken.
  + Fix gh#lwindolf/liferea#279: Rules not visible in searchdialog.
  + Fix gh#lwindolf/liferea#83: Segfault when sorting feeds in
    folder.
  + Fix gh#lwindolf/liferea#302: Broken compilation with
  - -disable-notify.
- Changes from version 1.10.17:
  + Fix gh#lwindolf/liferea#194: Add source dialog visually broken.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on
    enclosure download.
  + Fix gh#lwindolf/liferea#223: Search folder dialog don't show
    rules.
  + Fix gh#lwindolf/liferea#227: Preference dialog fails to load
    with latest GtkBuilder.
  + Fix gh#lwindolf/liferea#234: Segmentation fault upon attempting
    to add an OPML.
  + Fix compilation error when there is no libnotify.
  + Added debugging for gh#lwindolf/liferea#258: Dialog loading
    issues.
- Changes from version 1.10.16:
  + Added "Do Not Track" support (enabled per default).
  + Added x-scheme-handler/feed to desktop file.
  + Add image icons to plugins.
  + Enable tests for parsing RFC822 dates with 2 digit year.
  + Fix gh#lwindolf/liferea#78: Shaky text in feed list.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on enclose
    download.
  + Fix gh#lwindolf/liferea#198: Traceback on popup notifications.
  + Fix gh#lwindolf/liferea#216: Untranslatable strings.
  + Fix gh#lwindolf/liferea#256: PyGIWarnings on loading plugins.
- Changes from version 1.10.15:
  + Implement full screen mode for videos.
  + Fix gh#lwindolf/liferea#32: Prevent erroneous "Mark all as
    read".
  + Improves gh#lwindolf/liferea#36, gh#lwindolf/liferea#113: UI
    lock up during refresh.
  + Fix gh#lwindolf/liferea#180: Removing item from (v)folder marks
    all read.
  + Fix gh#lwindolf/liferea#140, #158: Vertical pane placement is
    forgotten.
  + Fix gh#lwindolf/liferea#182: Missing config.h include in
    date.c.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 1.10.19:
  + Fixes gh#lwindolf/liferea#317: Compilation problems in 1.10.18
    release.
  + Fixes gh#lwindolf/liferea#73: Problem with updating favicons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 1.11.7:
  + Add support for media:group.
  + Fix issues with media:content.
  + Bad .desktop categories definition.
  + Fix rules no visible in searchdialog.
  + "Download" tab in Tools/Preferences.
  + Segfault when sorting feeds in folder.
  + Updated manpage.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.12~rc3:
  + Fix GtkDoc warnings.
  + Filter commands are not asynchronous.
  + Missing space above internal browser address bar.
  + All "Unread" search folder items marked read at once.
  + Liferea does not always use theme icons when it is launched on
    system startup.
  + Updated translations.
- Changes from version 1.12~rc2:
  + Change all g_warnings() to g_print() for remote source to avoid
    "crashing" on errors.
  + Reorganized all UI definitions in separate files to simplify
    GtkBuilder handling.
  + Add GeoRSS info and map link in item header.
  + Replacing deprecated elements in preferences.
  + Create LifereaApplication type.
  + Partial RFC3229+feed support for bandwidth savings.
  + gtk_tree_store_get_path: assertion
    'iter-&gt;stamp == priv-&gt;stamp'.
  + Leftover OSM XSLT in item view.
  + Internal browser shows files system on go-back.
  + Updated translations.
- Changes from version 1.12~rc1:
  + Switch to webkit2gtk3.
  + Support for Do-Not-Track.
  + Improved trayicon plugin.
  + Support for Reedah and InoReader.
  + Support for categories in TheOldReader.
  + Simplified handling of external browsers.
- Replace pkgconfig(webkitgtk-3.0) with pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Change license to 'GPL-2.0' in place of 'GPL-2.0+':
  src/debug.[c|h]) does not specify 'or higher'.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Update to version 1.12.1:
  + Fix Lintian spelling errors.
  + Appstream data has new format.
  + Fix doesn't remember some sort orders.
  + Fix assertions/crashes on changing view layouts.
  + Workaround to avoid GtkPaned shrinking.
  + Updated translations.
- Changes from version 1.12.0:
  + Fixes unhiding from tray icon when activated via GApplication.
  + Reorder columns in 'Normal' email-like view to have the date
    column always at the end.
  + Add plugin to make unread feeds titles bold.
  + Workaround Liferea deanonymize Tor.
  + Resize both panes in normal and wide view.
  + Toggle_visibility() does not make a minimized window visible
    again.
  + Segfault when switching feed in combined view.
  + Handling of relative URLs in Atom parser.
  + Added 'View Image' context menu option in HTML view.
  + Dropped del.icio.us from social bookmarking options as it is a
    read-only service now.
  + Redesign of the wide view mode: larger titles with small text
    teasers.
  + Added optional AMP/HTML5 content enrichment feature.
  + Updated translations.
- Conditionalize handling of desktop_database_post(un),
  icon_theme_cache_post(un) and glib2_gsettings_schema_postun in
  post(un) to only apply for old versions of openSUSE.
- Clean up spec, drop obsolete clean section.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568289600">- Update to version 1.12.6:
  * #658: Add confirmation dialog when adding duplicate subscription
  * Fixes #689: When resuming from sleep feeds were being fetched
    before Wifi came up
  * Fixes #685: Headerbar plugin "Mark All Read" button is not
    feed-specific
  * Fixes #549: Scrollbars not always present in the headline area
  * Fixes #543: Next update overrides HTML5 enrichment
  * Fixes overly wide label in enclosure preferences dialog
  * Dropped unencrypted warning from auth dialog (not true anymore)
  * #688: Adding translatable tooltips for the headerbar plugin
  * #665: Webkit browser now supplies 'Liferea' component in
    user agent
  * #664: Added "Mark All As Read" button to headerbar plugin
  * #620: Added flatpak JSON
  * #579: Added item list column drag and drop reordering
  * #436, #662: Move from GnomeKeyring to libsecret
  * Fixes #663: Correct instapaper sharing link
  * Fixes #661: Update sharing links
  * Fixes #271: Consistent over usage of CPU (trigger by
    "Next Unread" loop)
  * #472, #632: Dropping Inoreader support (API broke)
  * Fixes #660: Added installable plugin to change accels
  * Fixes #654: Segfault on date out of range
  * Fixes #651: Fixes Free Music Archive link in default OPMLs
  * Fixes #649: Switch from persistent to session-only cookies
  * Fixes #645, #646: unread count of vfolder
  * Fixes #637: Extra keywords in .desktop file
    (syndication; rss; atom)
  * Fixes #557: Updating counters for remote sources
  * Updated cookie usage hint in FAQ
  * #634: Added setting for custom download commands
  * #614: GTK Headerbar support via plugin
  * #608: Refactoring UI code to switch to GAction and GtkBuilder
  * Note: this implies not having icons in the main menu anymore
  * which were still there for all non-GNOME users (see #626).
  * #589: Item list view column order rework as a preparation
    for possible real column drag&amp;drop. Introduces a new
    DConf setting for the column order.
  * Fixes #280: Mark read toolbar button always disabled for
    search folders
  * Fixes #591: Please add a safety question when
    "marking all read"
  * Fixes #625: Avoid exception in trayicon.py
  * Fixes #627: GnomeKeyring plugin fails to activate when
    keyring doesn't exist
  * Fixes #630: Fix feed list selection after DnD
  * Fixes #633: Big Memory leak in date code
  * Adding a plugin installer plugin that allows discovering
    and automatically installing 3rd party plugins
  * #585: Drop language from user agent to increase privacy
  * #583: Add transmission-gtk and aria2 as download tool options
  * #495: New command line option --disable-plugins (-p) to start
    with all plugins disabled.
  * Fixes #610: Liferea not showing up in GNOME Software
  * Fixes #604: Correctly print error message when failing to
    unlock GNOME keyring
  * Fixes #602: CSS style for GTK link colors not used
  * Fixes #581: Redirect location updates and adds HTTP 308
    (RFC 7538) support
  * Fixes #578: Unable to set unread items in bold
  * #584: Fixes broken OPML feed list entries
  * #577: Fixes newsbin doc typo
  * #584: Added Norwegian feed list
  * Translation updates
- rebase liferea-openSUSE-feeds.patch
- fixes boo#1150009</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1578916800">- Add export WEBKIT_DISABLE_COMPOSITING_MODE=1 as workaround for
  Factory build failure
  (https://github.com/lwindolf/liferea/issues/767)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1589457600">- Export WEBKIT_DISABLE_COMPOSITING_MODE=1 on Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1591963200">- Update to version 1.12.8:
  * Fixes #734: crash when selecting empty nodes
  * Fixes #727: Out-dated documentation on Firefox live bookmarks
  * Fixes headline large images/videos or images with margins
    causing horizontal scrolling in headline view
  * Fixes #840: OPML source subfolders not working
  * Update of French translation</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to version 1.12.9:
  * Fix embedded youtube video bug
  * Fix translations not applied to application menu bar and tool bar</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1620475200">- Update to version 1.13.6:
  * Change reader mode toggle from item view icon to toggle entry in item view context menu.
  * #343: UX redesign of the update message in the status bar. Now shows a update counter of the feeds being in update.
  * #964: Added pane position fix plugin providing a workaround for pane position issues when using the headerbar
  * #983: Use GtkFileChooserNative to allow selecting local files when run in sandbox.
  * Fixes #780: Improve date formatting when in locale en_GB
  * Fixes #944: Broken RTL text direction in feed content view
  * Fixes #949: Regression in notification plugin that caused it to show non-new items
  * Fixes #963: Checking for git command in plugin installer -&gt; warn user
  * Fixes #973: Broken CSS in Webkit2Gtk &gt;= 2.32
  * Updated Albanian translation
  * Updated French translation
  * Updated Italian translation
  * Updated German translation
  * #907: Add new search folder property that allows hiding read items
  * Now always shows the unread count of a search folder (instead of the item count) in the feed list
  * Now search folders are automatically rebuild when rules are changed
  * Adds a new simple focus plugin that adds transparency on the feed list when it is not focussed.
  * Add F10 hotkey to headerbar plugin to allow triggering the hamburger menu
  * Update Flatpak AppData with release dates
  * Make several plugins support gettext
  * Fixes #192: wrong button order of media player in RTL locales
  * Fixes #343: Usability of update infos in status bar. Now a total count is displayed on mass-updates and a per-feed info on single feed updates
  * Fixes #809: Usability of feed fetching errors.
  * Updated Polish translation
  * Updated German translation
  * Prevent endless loop on favicon discovery
  * #903: Prevent endless loop in feed autodiscovery
  * #912: Allow mutiple feed in same libnotify notification
  * Further favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons Fixes #440
  * Add reader mode toggle in the item view
  * #876 Add reader mode preference
  * Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings
  * Provide the default icon for feeds with no favicon as SVG for nicer rendering in wide view. Drop some unused icons. Replace tray icon with scalable version.
  * Fixes CRITICAL on trayicon plugin init
  * Fixes #884: Content of wrong feed is shown
  * Fixes #900: Flatpak needs icon named after appid
  * Fixes #908, #332: Search folder are not case-insensitive as documented
  * Fixes #899: Truncated articles (on 'Extrat full content')
  * #902: Updated Polish translation
  * #893: Update of bookmarking sites
  * #888: Changes required for Flathub
  * #882: Implement support for Webkits Intelligent Tracking Protection
  * #875: Add &lt;Ctrl&gt;-0 hotkey to reset zoom
  * #874: Add debug printing of SAX parser errors
  * #846: Remove deprecated usage of gdk_screen_*
  * #844: Update metainfo path (appdata target directory)
  * #776: CSS color update on theme change without restart
  * Fixes #883: Feed with comments: last comment replaces all content
  * Fixes #866: Bad encoding in doc/html/reference_de.html
  * Fixes #865: Fixes view mode switch
  * Fixes #841: Now shows progress bar when loading websites
  * Fixes #828: Crashing with segfault after opening feed articles
  * Fixes XLST exception on mediarss feeds with description
  * Drop blogChannel namespace support
  * Support multi-feed discovery
  * Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed
  * Drop CDF channel legacy support
  * Drop Atom 0.2/0.3 (aka Pie) legacy support
  * #893: Added Persion default feed list
  * #890: Update of Indionesian translation
  * #890: Update of French translation
  * #846, #864, #735: Fix main menu/toolbar not being translated
  * #854: Adding new search folder options to match subscription source ULR and parent folder name.
  * #851: Add accessibility check to code tests
  * #851: Fix accessibility annotations for several combo boxes.
  * #850: Fix embedded youtube video bug.
  * #765: Embed YouTube videos from MediaRSS feeds
  * #749: Add Readability.js library (Apache 2.0 licensed) and auto-apply Readability.js to all headlines
  * Drop unused glade/google_source.ui
  * Drop support of combined view mode, this is necessary to add rich content support which relies on DOM transformation and Readability.js
  * Drop ns_photo support, as it is rarely used and allows us to get rid of XSLT extra handling
  * #747: Font improvements
  * #250 Update some dialog labels
  * #803: Fix legacy links to mailing list and IRC in documentation.
  * Updated German translation
  * #861: Updated Spanish translation
  * Fixes #840: OPML source subfolders not working
  * #837: Removing GTimeVal references
  * #827: Respect global update refresh interval for TheOldReader
  * #826: Fix save/restore position issues with tray icon
  * #822: Improve performance of item list loading
  * Fixes #821: Skip current item when finding next unread item
  * #815: Add support for subscribing to HTML5 websites without RSS/Atom feeds by extracting article titles,links and descriptions
  * #816: Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view. Also add favicon URL discovery tests.
  * Fixes #821: Skip current selected unread item on 'next unread item'
  * #800: Expose remove-item action for plugins
  * Fixes #799: plugins/headerbar.py translations not active
  * Fixes #783: Update IS_STATE when update item in itemlistview
  * #752: Trayicon plugin has now a configuration option to change the behaviour when closing Liferea.
  * Fixes #693: Add trayicon plugin option to disable minimizing to tray
  * #764: Add MediaRSS support (e.g. Youtube feeds) to display descriptions and thumbnails
  * #773: Add WebKit Inspector menu option to HTML view when run with --debug-html (by sillyslux)
  * #714: Replaces deprecated gtk_menu_popup
  * #705: New hotkey Ctrl-O to open enclosures
  * #680: Add xdg-email command to item list popup menu
  * Drop unused glade/google_source.ui
  * #699: Refactoring of duplicate check handlingg
  * #746: Fix accessibility fatals reported by gla11y
  * Fixes #730: "Update all subscriptions at startup" overrides "Don't update this feed automatically"
  * Fixes #639: Right clicking on article no longer selects it
  * #737: Update of Italian translation
  * #745: URL fix for French example feeds
  * Update inline docs on headline view modes</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1626177600">- Fix missing python3-gobject-Gdk runtime dependency (boo#1187936)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1642075200">- Require python3-cairo; needed for tray icon (boo#1193579).</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1673784000">- Update to version 1.14.0
  + New 'Reader mode' preference that allows stripping all web
    content
  + Implement support for Webkits Intelligent Tracking Protection
  + New progress bar when loading websites
  + Youtube videos from media:video can be embedded now with a
    click on the video preview picture.
  + Changes to UserAgent handling: same UA is now used for both
    feed fetching and internal browsing.
  + New view mode 'Automatic' which switches between 'Normal' and
    'Wide' mode based on the window proportions.
  + Liferea now supports the new GTK dark theme logic, where in
    the GTK/GNOME preferences you define wether you "prefer" dark
    mode or light mode
  + Favicon discovery improvements: now detects all types of Apple
    Touch Icons, MS Tile Images and Safari Mask Icons
  + Increase size of stored favicons to 128x128px to improve icon
    quality in 3-pane wide view.
  + Make several plugins support gettext
  + Allow mutiple feed in same libnotify notification
  + Redesign of the update message in the status bar. It now shows
    a update counter of the feeds being in update.
  + You can now export a feed to XML file
  + Added an option to show news bins in reduced feed list
  + Added menu option to send item per mail
  + Default to https:// instead of http:// when user doesn't
    provide protocol on subscribing feed
  + Implement support for subscribing to LD+Json metadata listings
    e.g. concert or theater event listings
  + Implement support for subscribing to HTML5 websites
  + Support for media:description field of Youtube feeds
  + Improve HTML5 extraction: extract main tag if it exists and
    no article was found.
  + Execute feed pipe/filter commands asynchronously
  + Better explanation of feed update errors.
  + Added generic Google Reader API support (allows using FeedHQ,
    FreshRSS, Miniflux...)
  + Now allow converting TinyTinyRSS subscriptions to
    local subscriptions
  + New search folder rule to match podcasts
  + New search folder rule to match headline authors
  + New search folder rule to match subscription source
  + New search folder rule to match parent folder name
  + New search folder property that allows hiding read items
  + Now search folders are automatically rebuild when rules are
    changed
  + Added new plugin 'add-bookmark-site' that allows to configure
    a custom bookmarking site.
  + Added new plugin 'getfocus' that adds transparency on the feed
    list when it is not focussed.
  + Trayicon plugin has now a configuration option to change the
    behaviour when closing Liferea.
  + Trayicon plugin has now an option to disable minimizing to tray
  + New hot key Ctrl-D for 'Open in External Browser'
  + New hot key F10 for headerbar plugin to allow triggering the
    hamburger menu
  + New hot key Ctrl-0 to reset zoom
  + New hot key Ctrl-O to open enclosures
  + Fix hidden panes, Liferea will never allow the panes to be
    smaller than 5% in height or width
  + Wait for network to be fully available before updating
  + 2-pane mode was removed
  + Dropped CDF channel support
  + Dropped Atom 0.2/0.3 (aka Pie) support
  + Dropped blogChannel namespace support
  + Dropped photo namespace support
- Add libtool BuildRequires and run autogen.sh: the tarball is an
  unbootstrapped git archive.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674216000">- Use the properly boostrapped release tarball from upstream.
- Drop libtool BuildRequires and no longer run autogen.sh.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1678708800">- Update to version 1.14.1:
  + Fix CVE-2023-1350 - Remote code execution on feed enrichment
    (boo#1209190).</changelog>
</package>
<package pkgid="27a0fc7aef1bf8e88c20a0218ded23cabccb11c221ffe997a925dc29dba31fcb" name="liferea-debugsource" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="bp154.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414497600">- Update to version 1.10.12 (boo#906687):
  + Fix gh#lwindolf/liferea#86: Support HTTP content negotiation
  + Fix gh#lwindolf/liferea#98: Stop calling Atom person
    constructs w/ URI invalid
  + Fix gh#lwindolf/liferea#100: Problems with dark Adwaita theme
    in GTK 3.14
- Changes from versions 1.10.6 through 1.10.11:
  + See ChangeLog file
    (/usr/share/doc/packages/liferea/ChangeLog).</changelog>
  <changelog author="badshah400@gmail.com" date="1425211200">- Update to version 1.10.14 (boo#916784):
  + Fix gh#lwindolf/liferea#154: Crashes while starting (on
    corrupt icon).
  + Fix gh#lwindolf/liferea#134: Broken default news feed.
  + Fix gh#lwindolf/liferea#122: Crashes at launch,
    "segmentation fault".
  + Fix some memory leaks.
  + Fix gh#lwindolf/liferea#145: Wrong method triggered on
    'Launch External'.
  + Fix gh#lwindolf/liferea#149: Fixes a random crash on startup.
- Changes from version 1.10.13:
  + Fix gh#lwindolf/liferea#112: Wrapping issue in folder display.
  + Fix gh#lwindolf/liferea#114: Avoid termination on UTF-8
    validation error.
  + Fix gh#lwindolf/liferea#132: Broken link in documentation.</changelog>
  <changelog author="zaitor@opensuse.org" date="1455969600">- Update to version 1.10.18:
  + Fix gh#lwindolf/liferea#287: media:content support broken.
  + Fix gh#lwindolf/liferea#279: Rules not visible in searchdialog.
  + Fix gh#lwindolf/liferea#83: Segfault when sorting feeds in
    folder.
  + Fix gh#lwindolf/liferea#302: Broken compilation with
  - -disable-notify.
- Changes from version 1.10.17:
  + Fix gh#lwindolf/liferea#194: Add source dialog visually broken.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on
    enclosure download.
  + Fix gh#lwindolf/liferea#223: Search folder dialog don't show
    rules.
  + Fix gh#lwindolf/liferea#227: Preference dialog fails to load
    with latest GtkBuilder.
  + Fix gh#lwindolf/liferea#234: Segmentation fault upon attempting
    to add an OPML.
  + Fix compilation error when there is no libnotify.
  + Added debugging for gh#lwindolf/liferea#258: Dialog loading
    issues.
- Changes from version 1.10.16:
  + Added "Do Not Track" support (enabled per default).
  + Added x-scheme-handler/feed to desktop file.
  + Add image icons to plugins.
  + Enable tests for parsing RFC822 dates with 2 digit year.
  + Fix gh#lwindolf/liferea#78: Shaky text in feed list.
  + Fix gh#lwindolf/liferea#195: Out-dated documentation on enclose
    download.
  + Fix gh#lwindolf/liferea#198: Traceback on popup notifications.
  + Fix gh#lwindolf/liferea#216: Untranslatable strings.
  + Fix gh#lwindolf/liferea#256: PyGIWarnings on loading plugins.
- Changes from version 1.10.15:
  + Implement full screen mode for videos.
  + Fix gh#lwindolf/liferea#32: Prevent erroneous "Mark all as
    read".
  + Improves gh#lwindolf/liferea#36, gh#lwindolf/liferea#113: UI
    lock up during refresh.
  + Fix gh#lwindolf/liferea#180: Removing item from (v)folder marks
    all read.
  + Fix gh#lwindolf/liferea#140, #158: Vertical pane placement is
    forgotten.
  + Fix gh#lwindolf/liferea#182: Missing config.h include in
    date.c.</changelog>
  <changelog author="zaitor@opensuse.org" date="1462190400">- Update to version 1.10.19:
  + Fixes gh#lwindolf/liferea#317: Compilation problems in 1.10.18
    release.
  + Fixes gh#lwindolf/liferea#73: Problem with updating favicons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 1.11.7:
  + Add support for media:group.
  + Fix issues with media:content.
  + Bad .desktop categories definition.
  + Fix rules no visible in searchdialog.
  + "Download" tab in Tools/Preferences.
  + Segfault when sorting feeds in folder.
  + Updated manpage.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498046400">- Update to version 1.12~rc3:
  + Fix GtkDoc warnings.
  + Filter commands are not asynchronous.
  + Missing space above internal browser address bar.
  + All "Unread" search folder items marked read at once.
  + Liferea does not always use theme icons when it is launched on
    system startup.
  + Updated translations.
- Changes from version 1.12~rc2:
  + Change all g_warnings() to g_print() for remote source to avoid
    "crashing" on errors.
  + Reorganized all UI definitions in separate files to simplify
    GtkBuilder handling.
  + Add GeoRSS info and map link in item header.
  + Replacing deprecated elements in preferences.
  + Create LifereaApplication type.
  + Partial RFC3229+feed support for bandwidth savings.
  + gtk_tree_store_get_path: assertion
    'iter-&gt;stamp == priv-&gt;stamp'.
  + Leftover OSM XSLT in item view.
  + Internal browser shows files system on go-back.
  + Updated translations.
- Changes from version 1.12~rc1:
  + Switch to webkit2gtk3.
  + Support for Do-Not-Track.
  + Improved trayicon plugin.
  + Support for Reedah and InoReader.
  + Support for categories in TheOldReader.
  + Simplified handling of external browsers.
- Replace pkgconfig(webkitgtk-3.0) with pkgconfig(webkit2gtk-4.0)
  BuildRequires following upstreams port.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Change license to 'GPL-2.0' in place of 'GPL-2.0+':
  src/debug.[c|h]) does not specify 'or higher'.</changelog>
  <changelog author="zaitor@opensuse.org" date="1514462400">- Update to version 1.12.1:
  + Fix Lintian spelling errors.
  + Appstream data has new format.
  + Fix doesn't remember some sort orders.
  + Fix assertions/crashes on changing view layouts.
  + Workaround to avoid GtkPaned shrinking.
  + Updated translations.
- Changes from version 1.12.0:
  + Fixes unhiding from tray icon when activated via GApplication.
  + Reorder columns in 'Normal' email-like view to have the date
    column always at the end.
  + Add plugin to make unread feeds titles bold.
  + Workaround Liferea deanonymize Tor.
  + Resize both panes in normal and wide view.
  + Toggle_visibility() does not make a minimized window visible
    again.
  + Segfault when switching feed in combined view.
  + Handling of relative URLs in Atom parser.
  + Added 'View Image' context menu option in HTML view.
  + Dropped del.icio.us from social bookmarking options as it is a
    read-only service now.
  + Redesign of the wide view mode: larger titles with small text
    teasers.
  + Added optional AMP/HTML5 content enrichment feature.
  + Updated translations.
- Conditionalize handling of desktop_database_post(un),
  icon_theme_cache_post(un) and glib2_gsettings_schema_postun in
  post(un) to only apply for old versions of openSUSE.
- Clean up spec, drop obsolete clean section.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1568289600">- Update to version 1.12.6:
  * #658: Add confirmation dialog when adding duplicate subscription
  * Fixes #689: When resuming from sleep feeds were being fetched
    before Wifi came up
  * Fixes #685: Headerbar plugin "Mark All Read" button is not
    feed-specific
  * Fixes #549: Scrollbars not always present in the headline area
  * Fixes #543: Next update overrides HTML5 enrichment
  * Fixes overly wide label in enclosure preferences dialog
  * Dropped unencrypted warning from auth dialog (not true anymore)
  * #688: Adding translatable tooltips for the headerbar plugin
  * #665: Webkit browser now supplies 'Liferea' component in
    user agent
  * #664: Added "Mark All As Read" button to headerbar plugin
  * #620: Added flatpak JSON
  * #579: Added item list column drag and drop reordering
  * #436, #662: Move from GnomeKeyring to libsecret
  * Fixes #663: Correct instapaper sharing link
  * Fixes #661: Update sharing links
  * Fixes #271: Consistent over usage of CPU (trigger by
    "Next Unread" loop)
  * #472, #632: Dropping Inoreader support (API broke)
  * Fixes #660: Added installable plugin to change accels
  * Fixes #654: Segfault on date out of range
  * Fixes #651: Fixes Free Music Archive link in default OPMLs
  * Fixes #649: Switch from persistent to session-only cookies
  * Fixes #645, #646: unread count of vfolder
  * Fixes #637: Extra keywords in .desktop file
    (syndication; rss; atom)
  * Fixes #557: Updating counters for remote sources
  * Updated cookie usage hint in FAQ
  * #634: Added setting for custom download commands
  * #614: GTK Headerbar support via plugin
  * #608: Refactoring UI code to switch to GAction and GtkBuilder
  * Note: this implies not having icons in the main menu anymore
  * which were still there for all non-GNOME users (see #626).
  * #589: Item list view column order rework as a preparation
    for possible real column drag&amp;drop. Introduces a new
    DConf setting for the column order.
  * Fixes #280: Mark read toolbar button always disabled for
    search folders
  * Fixes #591: Please add a safety question when
    "marking all read"
  * Fixes #625: Avoid exception in trayicon.py
  * Fixes #627: GnomeKeyring plugin fails to activate when
    keyring doesn't exist
  * Fixes #630: Fix feed list selection after DnD
  * Fixes #633: Big Memory leak in date code
  * Adding a plugin installer plugin that allows discovering
    and automatically installing 3rd party plugins
  * #585: Drop language from user agent to increase privacy
  * #583: Add transmission-gtk and aria2 as download tool options
  * #495: New command line option --disable-plugins (-p) to start
    with all plugins disabled.
  * Fixes #610: Liferea not showing up in GNOME Software
  * Fixes #604: Correctly print error message when failing to
    unlock GNOME keyring
  * Fixes #602: CSS style for GTK link colors not used
  * Fixes #581: Redirect location updates and adds HTTP 308
    (RFC 7538) support
  * Fixes #578: Unable to set unread items in bold
  * #584: Fixes broken OPML feed list entries
  * #577: Fixes newsbin doc typo
  * #584: Added Norwegian feed list
  * Translation updates
- rebase liferea-openSUSE-feeds.patch
- fixes boo#1150009</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1578916800">- Add export WEBKIT_DISABLE_COMPOSITING_MODE=1 as workaround for
  Factory build failure
  (https://github.com/lwindolf/liferea/issues/767)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Max Lin &lt;mlin@suse.com&gt;" date="1589457600">- Export WEBKIT_DISABLE_COMPOSITING_MODE=1 on Leap 15.2 build</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1591963200">- Update to version 1.12.8:
  * Fixes #734: crash when selecting empty nodes
  * Fixes #727: Out-dated documentation on Firefox live bookmarks
  * Fixes headline large images/videos or images with margins
    causing horizontal scrolling in headline view
  * Fixes #840: OPML source subfolders not working
  * Update of French translation</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to version 1.12.9:
  * Fix embedded youtube video bug
  * Fix translations not applied to application menu bar and tool bar</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1620475200">- Update to version 1.13.6:
  * Change reader mode toggle from item view icon to toggle entry in item view context menu.
  * #343: UX redesign of the update message in the status bar. Now shows a update counter of the feeds being in update.
  * #964: Added pane position fix plugin providing a workaround for pane position issues when using the headerbar
  * #983: Use GtkFileChooserNative to allow selecting local files when run in sandbox.
  * Fixes #780: Improve date formatting when in locale en_GB
  * Fixes #944: Broken RTL text direction in feed content view
  * Fixes #949: Regression in notification plugin that caused it to show non-new items
  * Fixes #963: Checking for git command in plugin installer -&gt; warn user
  * Fixes #973: Broken CSS in Webkit2Gtk &gt;= 2.32
  * Updated Albanian translation
  * Updated French translation
  * Updated Italian translation
  * Updated German translation
  * #907: Add new search folder property that allows hiding read items
  * Now always shows the unread count of a search folder (instead of the item count) in the feed list
  * Now search folders are automatically rebuild when rules are changed
  * Adds a new simple focus plugin that adds transparency on the feed list when it is not focussed.
  * Add F10 hotkey to headerbar plugin to allow triggering the hamburger menu
  * Update Flatpak AppData with release dates
  * Make several plugins support gettext
  * Fixes #192: wrong button order of media player in RTL locales
  * Fixes #343: Usability of update infos in status bar. Now a total count is displayed on mass-updates and a per-feed info on single feed updates
  * Fixes #809: Usability of feed fetching errors.
  * Updated Polish translation
  * Updated German translation
  * Prevent endless loop on favicon discovery
  * #903: Prevent endless loop in feed autodiscovery
  * #912: Allow mutiple feed in same libnotify notification
  * Further favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons Fixes #440
  * Add reader mode toggle in the item view
  * #876 Add reader mode preference
  * Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings
  * Provide the default icon for feeds with no favicon as SVG for nicer rendering in wide view. Drop some unused icons. Replace tray icon with scalable version.
  * Fixes CRITICAL on trayicon plugin init
  * Fixes #884: Content of wrong feed is shown
  * Fixes #900: Flatpak needs icon named after appid
  * Fixes #908, #332: Search folder are not case-insensitive as documented
  * Fixes #899: Truncated articles (on 'Extrat full content')
  * #902: Updated Polish translation
  * #893: Update of bookmarking sites
  * #888: Changes required for Flathub
  * #882: Implement support for Webkits Intelligent Tracking Protection
  * #875: Add &lt;Ctrl&gt;-0 hotkey to reset zoom
  * #874: Add debug printing of SAX parser errors
  * #846: Remove deprecated usage of gdk_screen_*
  * #844: Update metainfo path (appdata target directory)
  * #776: CSS color update on theme change without restart
  * Fixes #883: Feed with comments: last comment replaces all content
  * Fixes #866: Bad encoding in doc/html/reference_de.html
  * Fixes #865: Fixes view mode switch
  * Fixes #841: Now shows progress bar when loading websites
  * Fixes #828: Crashing with segfault after opening feed articles
  * Fixes XLST exception on mediarss feeds with description
  * Drop blogChannel namespace support
  * Support multi-feed discovery
  * Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed
  * Drop CDF channel legacy support
  * Drop Atom 0.2/0.3 (aka Pie) legacy support
  * #893: Added Persion default feed list
  * #890: Update of Indionesian translation
  * #890: Update of French translation
  * #846, #864, #735: Fix main menu/toolbar not being translated
  * #854: Adding new search folder options to match subscription source ULR and parent folder name.
  * #851: Add accessibility check to code tests
  * #851: Fix accessibility annotations for several combo boxes.
  * #850: Fix embedded youtube video bug.
  * #765: Embed YouTube videos from MediaRSS feeds
  * #749: Add Readability.js library (Apache 2.0 licensed) and auto-apply Readability.js to all headlines
  * Drop unused glade/google_source.ui
  * Drop support of combined view mode, this is necessary to add rich content support which relies on DOM transformation and Readability.js
  * Drop ns_photo support, as it is rarely used and allows us to get rid of XSLT extra handling
  * #747: Font improvements
  * #250 Update some dialog labels
  * #803: Fix legacy links to mailing list and IRC in documentation.
  * Updated German translation
  * #861: Updated Spanish translation
  * Fixes #840: OPML source subfolders not working
  * #837: Removing GTimeVal references
  * #827: Respect global update refresh interval for TheOldReader
  * #826: Fix save/restore position issues with tray icon
  * #822: Improve performance of item list loading
  * Fixes #821: Skip current item when finding next unread item
  * #815: Add support for subscribing to HTML5 websites without RSS/Atom feeds by extracting article titles,links and descriptions
  * #816: Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view. Also add favicon URL discovery tests.
  * Fixes #821: Skip current selected unread item on 'next unread item'
  * #800: Expose remove-item action for plugins
  * Fixes #799: plugins/headerbar.py translations not active
  * Fixes #783: Update IS_STATE when update item in itemlistview
  * #752: Trayicon plugin has now a configuration option to change the behaviour when closing Liferea.
  * Fixes #693: Add trayicon plugin option to disable minimizing to tray
  * #764: Add MediaRSS support (e.g. Youtube feeds) to display descriptions and thumbnails
  * #773: Add WebKit Inspector menu option to HTML view when run with --debug-html (by sillyslux)
  * #714: Replaces deprecated gtk_menu_popup
  * #705: New hotkey Ctrl-O to open enclosures
  * #680: Add xdg-email command to item list popup menu
  * Drop unused glade/google_source.ui
  * #699: Refactoring of duplicate check handlingg
  * #746: Fix accessibility fatals reported by gla11y
  * Fixes #730: "Update all subscriptions at startup" overrides "Don't update this feed automatically"
  * Fixes #639: Right clicking on article no longer selects it
  * #737: Update of Italian translation
  * #745: URL fix for French example feeds
  * Update inline docs on headline view modes</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1626177600">- Fix missing python3-gobject-Gdk runtime dependency (boo#1187936)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1642075200">- Require python3-cairo; needed for tray icon (boo#1193579).</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1673784000">- Update to version 1.14.0
  + New 'Reader mode' preference that allows stripping all web
    content
  + Implement support for Webkits Intelligent Tracking Protection
  + New progress bar when loading websites
  + Youtube videos from media:video can be embedded now with a
    click on the video preview picture.
  + Changes to UserAgent handling: same UA is now used for both
    feed fetching and internal browsing.
  + New view mode 'Automatic' which switches between 'Normal' and
    'Wide' mode based on the window proportions.
  + Liferea now supports the new GTK dark theme logic, where in
    the GTK/GNOME preferences you define wether you "prefer" dark
    mode or light mode
  + Favicon discovery improvements: now detects all types of Apple
    Touch Icons, MS Tile Images and Safari Mask Icons
  + Increase size of stored favicons to 128x128px to improve icon
    quality in 3-pane wide view.
  + Make several plugins support gettext
  + Allow mutiple feed in same libnotify notification
  + Redesign of the update message in the status bar. It now shows
    a update counter of the feeds being in update.
  + You can now export a feed to XML file
  + Added an option to show news bins in reduced feed list
  + Added menu option to send item per mail
  + Default to https:// instead of http:// when user doesn't
    provide protocol on subscribing feed
  + Implement support for subscribing to LD+Json metadata listings
    e.g. concert or theater event listings
  + Implement support for subscribing to HTML5 websites
  + Support for media:description field of Youtube feeds
  + Improve HTML5 extraction: extract main tag if it exists and
    no article was found.
  + Execute feed pipe/filter commands asynchronously
  + Better explanation of feed update errors.
  + Added generic Google Reader API support (allows using FeedHQ,
    FreshRSS, Miniflux...)
  + Now allow converting TinyTinyRSS subscriptions to
    local subscriptions
  + New search folder rule to match podcasts
  + New search folder rule to match headline authors
  + New search folder rule to match subscription source
  + New search folder rule to match parent folder name
  + New search folder property that allows hiding read items
  + Now search folders are automatically rebuild when rules are
    changed
  + Added new plugin 'add-bookmark-site' that allows to configure
    a custom bookmarking site.
  + Added new plugin 'getfocus' that adds transparency on the feed
    list when it is not focussed.
  + Trayicon plugin has now a configuration option to change the
    behaviour when closing Liferea.
  + Trayicon plugin has now an option to disable minimizing to tray
  + New hot key Ctrl-D for 'Open in External Browser'
  + New hot key F10 for headerbar plugin to allow triggering the
    hamburger menu
  + New hot key Ctrl-0 to reset zoom
  + New hot key Ctrl-O to open enclosures
  + Fix hidden panes, Liferea will never allow the panes to be
    smaller than 5% in height or width
  + Wait for network to be fully available before updating
  + 2-pane mode was removed
  + Dropped CDF channel support
  + Dropped Atom 0.2/0.3 (aka Pie) support
  + Dropped blogChannel namespace support
  + Dropped photo namespace support
- Add libtool BuildRequires and run autogen.sh: the tarball is an
  unbootstrapped git archive.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1674216000">- Use the properly boostrapped release tarball from upstream.
- Drop libtool BuildRequires and no longer run autogen.sh.</changelog>
  <changelog author="Marcel Kuehlhorn &lt;tux93@opensuse.org&gt;" date="1678708800">- Update to version 1.14.1:
  + Fix CVE-2023-1350 - Remote code execution on feed enrichment
    (boo#1209190).</changelog>
</package>
<package pkgid="0aaa6a08dcc8aa943a8b32ad4f0ee588b681ee0175a8eb7ffe6d90b5f2b7a764" name="lighttpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="688bf20d9da8d581ca38300d05d6b1fff3bdbb1818fa9e65001a837a947b2cfe" name="lighttpd-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="1a487a659b28b2ee3043c41aa067b8526665ac30569c2a659c539b25ceff41ff" name="lighttpd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="4ba4b243966fec61d1df188a57f05886291a47433061a97f5cae1e13b7b3f9f8" name="lighttpd-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="7d58cfff59480c78580fd6b915db5770ce0f3f0799569bece2fb547079a3fa52" name="lighttpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="1adb4fccbbe43b6e01fe1c7f3eaf06c84365745bebf08dfea0c073f471be7dc6" name="lighttpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="d1cf3ad538a952de18828cf35d1aa9a5a2d5824b15cd6806d3d16fcc6e358b67" name="lighttpd-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="ba4acd7635fe3fb7448cbed2aa1ead869ee54f14a02286390c95973600a7526c" name="lighttpd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="986aa887ecc591179878e56f033781c9521be62c84ba6556e803f7df8ad43f62" name="lighttpd-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="f67cb35c0bbd9716ab92012d97ef5074f7e4eef1ee37ee4fa95c550ef0d900ef" name="lighttpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="ac01084aca353df866204963da763aed55ef461b18ea13e79330c55e37402224" name="lighttpd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="0251271145b5df7470c423cc19acbd14a093cafe8859d59444c475dc55392baf" name="lighttpd-debugsource" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="8930b826a9a6e361ccb20c0d303effbad36a5c77ec2689004ff40162af5bc877" name="lighttpd-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="7f740a01246416c7238956f097346bbfab2cd3b712c9613c37d6b9d55a4ade6b" name="lighttpd-debugsource" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="75e71ff7c8fe06fb32bd1d6aa21d4b0abdc57d60d8bee7fccaa330e8f4749084" name="lighttpd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="7483ce5d70d3162ffb0f3250539a893eaa6b45b7ec79933e2d4e3791a87ff556" name="lighttpd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="5816527b7ae5c4f667c7fcb50ef3df3f3758ac443a7088e2961ec1eac48502fd" name="lighttpd-debugsource" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="45ae78ec33782724005a36b73782278db4338a8b52199c5cb3fd851185c13d4f" name="lighttpd-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="49af35ce550c850541cbd6e2872e486ed9e4a1a3e82cf8a03e64e00638951d2f" name="lighttpd-debugsource" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="a69f4ec86a6e05653ccdf65f34179baefc04158dc4a6dede9ce7e6b938bc101e" name="lighttpd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="07f352a92340b4d8183d053d1e766f6e634ba5c66936bf6da212fe5af9481a7f" name="lighttpd-mod_authn_gssapi-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="e95ab1090d60d9eeba9f51bb4a9c18c9237ee6417f7b7250d97dab7df78253db" name="lighttpd-mod_authn_gssapi-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="2c39840e44e7bbdb2e96469c0dfab1a988f9195aef29f1b8c99615b318abac8f" name="lighttpd-mod_authn_gssapi-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="162f97a7c15fbce17317589def1cec3d029a4bfd036d375fb2b61f56abd20753" name="lighttpd-mod_authn_gssapi-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="c5d31f503ade1fd54b09460638df2e1e2d7ab3d3fe6c89ae4ee2db3cbf8b0fae" name="lighttpd-mod_authn_gssapi-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="27b5497d8809b7fe3079560e6bc3d8721e55da187e92ef14f12418be5418e728" name="lighttpd-mod_authn_gssapi-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="a35c5ed3b30b841a53ba92d08a119ff9f64f3d53f384ae758ee1ed381f639931" name="lighttpd-mod_authn_gssapi-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="2be33fd1e68e757ae849ac18bcb7107e90f1aa6986eeccb924de5a8ca17f59a1" name="lighttpd-mod_authn_gssapi-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="d06cc14f148b86cef35223632a44a3e8b0b64e5e03f6936864ffbe0ad214df6a" name="lighttpd-mod_authn_gssapi-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="27134da533d02f168fd82c0ea5754ea94411d7b0dff4259c041706ffab565338" name="lighttpd-mod_authn_gssapi-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="65d222223aeb8519dae8532986fe5fcce73515acd908d3930c24c6abe5abbd6f" name="lighttpd-mod_authn_ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="14125aa204cf011ad96faad18f41c1207efd626cd042f35732ff8be8a4d4fa66" name="lighttpd-mod_authn_ldap-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="774f411f7d05ffb31f56bac7b03c0f052d652b375ebbbc046ecb8f970e886439" name="lighttpd-mod_authn_ldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="a4750d835af00e38928ddd14d44380d5ec0fbcdbf59faffb09fe953a60d86371" name="lighttpd-mod_authn_ldap-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="e44c1e2303e00a35fbd5a7d20d85ad5457adf5a68aeefdb3eb52c3d60f9514e7" name="lighttpd-mod_authn_ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="8b0f21d17f2dac260cdba618cc7504c08baab83e2fb79a983472f4c1d0cfd81b" name="lighttpd-mod_authn_ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="2413ca598480f5c5ca24df53fd4264f262e44ccf576dae93f8b2d4e2c762b33d" name="lighttpd-mod_authn_ldap-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="bbc391cf2f78f4f58e7ec4e5f078b72dd37144c4914ab8cb3f73b15565de7c3d" name="lighttpd-mod_authn_ldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="c1938ee4a325e717ac97d20d562eff93ad3d15c325025dadbbfeb42633314afd" name="lighttpd-mod_authn_ldap-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="926027cc22603e7ab988760d0aa29750a8947b7816d4c2b40de83ccf219d20d0" name="lighttpd-mod_authn_ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="679187399dd779ae2c7f6bc389d3e603e06658b2e5e8312e8ecb0fec87b0a354" name="lighttpd-mod_authn_pam-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="b319734add1e6182512b275bc5c5e0f98d977835ca2d817ff71628bd31b98f5f" name="lighttpd-mod_authn_pam-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="3844fbb9b1f939b261b292b63f3c1e2a809d81462ec4ce71f0ec420bae41b321" name="lighttpd-mod_authn_pam-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="3cd6d30b914300a892378168be1f2af1db2f96781f58911b406246c50cd3f4ff" name="lighttpd-mod_authn_pam-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="402f15c788db98ff51bf784bc3d100d56b6d4fbd8aa956d19885dc570de92218" name="lighttpd-mod_authn_pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="f331c25bc760727fa3955cb314bee0bf89e9ae26963fb6a246938fe60c0430e6" name="lighttpd-mod_authn_pam-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="e97bcd6ed18f1f994305f8fa85282ed40451f85f1c394331f6ad22b60a032cfe" name="lighttpd-mod_authn_pam-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="b3cddb57f3c1a141aefc888402c76a85118e84770e10a7090026255c4a981c42" name="lighttpd-mod_authn_pam-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="6166abaf43189a81ed865135fb24b9f944c7910d448225fc8dc7daa17fd5902a" name="lighttpd-mod_authn_pam-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="01d5655c158558edddbe7269cd0416a9587c7b61350ee4220177fec4d8053f00" name="lighttpd-mod_authn_pam-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="28b65f581a615c434ec842b4d4229cd470b0ae5b67fd625ea4d058909060bc47" name="lighttpd-mod_authn_sasl-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="7ca76338c7fffc0c21e1fcc7e36273f6d90df33170aac8af998b0a1ed138e0f1" name="lighttpd-mod_authn_sasl-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="7a16880379dabd9adce131c15ebbc173bd143648829d49616e60fef72093bbaf" name="lighttpd-mod_authn_sasl-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="2b692d75002a3274d37a949ab346ed1a6478fcdde479bdad1910fc9b6e3e720a" name="lighttpd-mod_authn_sasl-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="436e7fe2ccbf30ad5914679b7fcfdf1f7c70fa41d792931c629c06b596e01bee" name="lighttpd-mod_authn_sasl-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="431672eaa74becaca05d829571b93847047104725f7cdbfeac0bb56f516714bd" name="lighttpd-mod_authn_sasl-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="fb03ac6f237a655f5b665e6ff4d3dcf04e9b78e692937ba67c79677bb9ddada9" name="lighttpd-mod_authn_sasl-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="43f8e7b91d2c2a91c3177339b9bba97d403c1bf24be4b12c0ce47c6358b7371c" name="lighttpd-mod_authn_sasl-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="b679863d4cdfc2d1b717bcd962b10997991c4345e635d3248062a0785c98a9f4" name="lighttpd-mod_authn_sasl-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="42fb259955b285fc6844a85675d721b41830179e7a0b129c93521d88427c073a" name="lighttpd-mod_authn_sasl-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="1be1360e5bbe3707db13d46c18c74cab35d831d623d25fb2138a448bc6e01fdc" name="lighttpd-mod_magnet-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="ebc3526e735653fca1d088f003db6da4848273d4a67e0c46b88733fdc0e63f11" name="lighttpd-mod_magnet-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="c735d017280a7042573540f2ce1d21ca8ca83d2a3f7fb8566d615e178f51fbd0" name="lighttpd-mod_magnet-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="6193311c949b08a92ede041afa841d67cd1996a0052112eb74b72e624f68e209" name="lighttpd-mod_magnet-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="10508e895494c420eb4166689883ee38ce53c4e1ad6fb735b183269cf67b2899" name="lighttpd-mod_magnet-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="a5b56631a1d468ba25611ca7211d002fac2869cf256d5beee3db8e7f89676813" name="lighttpd-mod_magnet-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="1e06113d0d5fb3c6f276f587b80a5c6268eb63859592d0493d1535249468115b" name="lighttpd-mod_magnet-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="72d1acb69ba25c6c24b55d2e244eb1fe1135d208ab80bdb8dcedfed30f01a635" name="lighttpd-mod_magnet-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="4d8db3951c73ef7deca6a91eb2b21653bfc7af1d3142e192059cb5757ea4b0e7" name="lighttpd-mod_magnet-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="348e9f26bf6c2a081bc988a8b3539af2c4fe0db1500fc876bef355a5752111c0" name="lighttpd-mod_magnet-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="d067606e1bbeb5cd05265aeca6e3a0b86a2aace9f0d1ea8e4626d942bb2cf9d6" name="lighttpd-mod_maxminddb-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="b05419ecf885d1743a59937142163778fd56a2fd78df4b50d8ab7ee34e44c1d2" name="lighttpd-mod_maxminddb-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="94c6ec55a6b29f4551204432e29662d30bdabb5bded90b2dcd415b72a5ca802a" name="lighttpd-mod_maxminddb-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="c5eb0f36fd9641a28cc2fb1bed90b4c936bd78b9c62ba1ff91bbe045c61d13bd" name="lighttpd-mod_maxminddb-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="f37f9b34b0d7a990206a35ce3bfe1ddf53933ad81daf84ee081160351b4613e4" name="lighttpd-mod_maxminddb-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="98dd14c474e4a2fd0fb1f61b6cfbd33dc17ceebfca6345707c6029fa130b42ec" name="lighttpd-mod_maxminddb-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="20f6ef96d66bcb4ff71087c76943606a6e3b4036136910c07e0a390e081f3b8d" name="lighttpd-mod_maxminddb-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="a952e941f03bfec636b018192c20364d1c6940dde0ff30c730894ea48a397896" name="lighttpd-mod_maxminddb-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="774e84137b58be3794b50aecd81dafd7424514889134b0c18988486b65546770" name="lighttpd-mod_maxminddb-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="9aa5227ffd88f32e1caa2169383f36ddd8abb1e1e72d821b33c14e9a6d713744" name="lighttpd-mod_maxminddb-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="34718e6accc110cba4d677bc6ad9985505b7e6cf76cc08d5750bb696927491e2" name="lighttpd-mod_rrdtool-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="914489b35144e1f726c99733d5582c47e1fe9c7fc3a24a789de12f24fcab531b" name="lighttpd-mod_rrdtool-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="7b8385f682eee03f0f9cd67b868f31574b843413dbd1ff639fe662c13292fa1f" name="lighttpd-mod_rrdtool-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="18830fbac3a4d8a4199cd68f2bb2dde1ad881c9ffda4d22cb8a13db5df20058b" name="lighttpd-mod_rrdtool-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="8002e5a2b5a412a474f94df594282bffd426fe866bc86434c8b806558fb40f2e" name="lighttpd-mod_rrdtool-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="c5e6b7ee5bfdd1c96c34117e6662e804483e15f46f3b37ad1264b5a6fc0ab2cd" name="lighttpd-mod_rrdtool-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="22f7956df24478baa4e671702dc81961f24733347c01c878169e1598f247ed44" name="lighttpd-mod_rrdtool-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="e8118dcbd524c9bf40285f2532acf3cba4a0704aa9eddcd21cde745963aec1b9" name="lighttpd-mod_rrdtool-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="0c27d1d05cb5f1a129f6a5cf0d1b5a5d8a412d57635706aca996500ab353f4ef" name="lighttpd-mod_rrdtool-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="ac7c9b196a85f38f74914f5aa0a89986d6c1e6d28e801e88b14e2a3d5c38238b" name="lighttpd-mod_rrdtool-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="d723db653a35946a481c79a64a27604ebd30536d2815507f9006ac0572c1ab90" name="lighttpd-mod_vhostdb_dbi-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="78c5d6230dbdaf74c3a99c0ac01d4beebd5c3ac1a39aa9953bfc7adb5c8c486f" name="lighttpd-mod_vhostdb_dbi-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="529bdf96a211c0444c0a739b75bdb9a8a9ed7a884d934e946a98b1ebb2266e05" name="lighttpd-mod_vhostdb_dbi-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="2ef82b49b68f20c09ad7424470c5d09adc9659204b859eea97e7d4965c7899cb" name="lighttpd-mod_vhostdb_dbi-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="a61a17c878cc7423e8f2e9c8cf4dc07e361e7ae6a5263fc63380da7121a52e51" name="lighttpd-mod_vhostdb_dbi-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="cc99a0159ca488887dd1008d0f456b43b75d819066f6d24ae3316a5815b87333" name="lighttpd-mod_vhostdb_dbi-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="5c5720b036f28859021004f082f13d3edb9b820318135f5a5709ee5d43315ff8" name="lighttpd-mod_vhostdb_dbi-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="e2c9068cbcc59bc5d6835d0df969b85428b1306f222844becfedaa2b43134820" name="lighttpd-mod_vhostdb_dbi-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="868ec6563e368f82a0f117cba0339e9a7659cad78fdee05bd5f61bf1e2c8b82c" name="lighttpd-mod_vhostdb_dbi-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="775ef71d927894d6312cfb0a5be32874593ff2db53f81087693ad1dce6ce339f" name="lighttpd-mod_vhostdb_dbi-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="e2cd43833bcd53b0edb7812d176d1424a7dce139cf119d2139e5eaf232385857" name="lighttpd-mod_vhostdb_ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="6d91ad3f852f6781346fd8fb056adc7c417c2fdb50e006fbe30d05a56be0bf86" name="lighttpd-mod_vhostdb_ldap-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="a7a322d12fa298cee6159129ece1f8d2f80ae9fcfac1eb56d39273dcaf5f1423" name="lighttpd-mod_vhostdb_ldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="934199478d0d5278fb4711342fb0ecbfed96437d89b8253b9d1872ce726b2413" name="lighttpd-mod_vhostdb_ldap-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="9fcdd037b6bb4101b1d59419a7f74ffd24777982e8ad8b021a30771c09add40e" name="lighttpd-mod_vhostdb_ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="bf4572869f96f4d436029d75a6559c895bb2df18b163fe9d157b771c4acb73d1" name="lighttpd-mod_vhostdb_ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="b271db9cb962401ff963fcd1504cdfa6aa9057d5a4960142a9f73c97ef827d71" name="lighttpd-mod_vhostdb_ldap-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="5a8c3a489dcce127fbff2dac92a78145a767df762a715915761e49de07e818b6" name="lighttpd-mod_vhostdb_ldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="f0a57ead29858a32a0bffcd21695ddfd1365ebb758f2e020fb0160258c000dad" name="lighttpd-mod_vhostdb_ldap-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="b28e6285e33cb26f27eb4f86bfa56d3486f4f241fef52a846532903a589a1422" name="lighttpd-mod_vhostdb_ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="247e3b546a6ff16836e199cefcbdb12ab6f49a4ce47c8ad2ff8ee05e306b8931" name="lighttpd-mod_vhostdb_mysql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="907b12836a7f11f08f51f0fb7b4fcb132cd68bb48068561d000f284d3d8322ae" name="lighttpd-mod_vhostdb_mysql-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="c84f16687f2db173909ce0fb078d292ad02ba63d20c51daa51aeeaa8fd2d9ca1" name="lighttpd-mod_vhostdb_mysql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="a157c081e4773e4f764dc140a4edd80386734fabce9d748a67ea15ce31ea40bf" name="lighttpd-mod_vhostdb_mysql-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="5169c335992aad9d2934f72dc4a9885679781b81486a4217f2270177e30a4de7" name="lighttpd-mod_vhostdb_mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="510400b9edc9aa1baf5109035cf786d53760ac83d4cb486be37963c41bc08166" name="lighttpd-mod_vhostdb_mysql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="c71bab215a37f0bd9c24d858fbe88c390740dfb59dcbb366439f303f2a4cabc5" name="lighttpd-mod_vhostdb_mysql-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="f26fa847b9241f69b4b3c6e3ba23b57e749666619a258e3702166fbb88992b14" name="lighttpd-mod_vhostdb_mysql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="d6c702c808e9a4675917f4e2a07081909f1959c992b0887a41d325847ad6ed3b" name="lighttpd-mod_vhostdb_mysql-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="72fd12fe41fef83419d9e20553d178e05aa96a00889a4b145de3bf68ba207d76" name="lighttpd-mod_vhostdb_mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="cbf1e64cd678d4849cf2abc5f387e89407fc6cec204d690115073cb38ef439c7" name="lighttpd-mod_vhostdb_pgsql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="6e81764140792efc24b64c56ec7198651a3756a1ead800fe69e63883a29e93b0" name="lighttpd-mod_vhostdb_pgsql-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="54354e075b689c5977b0a6b2bec68a440e4ac72f851d441dfe7d8b9e6727160f" name="lighttpd-mod_vhostdb_pgsql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="ab77f6bb6199a77b42e568702ee77278e607ee1eae878e378e271e7994538e59" name="lighttpd-mod_vhostdb_pgsql-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="6ed7de3c443a79eb343f6ab1e87d5bd6b0c2ed35ec8966a0df85933e69dbc91a" name="lighttpd-mod_vhostdb_pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="bab353393757a2c306b51259373cc2bb125dd85416a128be4166aa548553d5e5" name="lighttpd-mod_vhostdb_pgsql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="5c83cbb7fbc82781b361f20b5d541c2168710d51aad04684a8bb3c74a32d297b" name="lighttpd-mod_vhostdb_pgsql-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="9341a9ad24d09ddb9de9b5663a61189764dcc0b17c17f018900c2ecff8092d7e" name="lighttpd-mod_vhostdb_pgsql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="9eda3162ae421fe07d2e4ee2d4811fcf9c5ccdb84c30d80966a355b21dd58795" name="lighttpd-mod_vhostdb_pgsql-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="a1d3256943c40001e8c1582ba39f474ed224413863761913ddf2cceafcceffcd" name="lighttpd-mod_vhostdb_pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="b07f5cd5da73bb65677141de5ee555e1d415c8034cfcbbc249cf58d2d2a168fe" name="lighttpd-mod_webdav-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="7b113df728be9feb660e853301b142f07748ce1f87fb9212659bc8868392b683" name="lighttpd-mod_webdav-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="e1f21cdd9e921bc61cfec21c523a9fa8af81ec09fdd090438f65522df1e297d6" name="lighttpd-mod_webdav-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="cd3214b73bdfb3c37a7e8daacced4fba04bb7a8397a07a28efaa4d145b66d02f" name="lighttpd-mod_webdav-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="b6f66d296f370147b3218727bd33650b0f898858e34b4993dacdf4367ce74fc7" name="lighttpd-mod_webdav-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.66" rel="bp154.2.3.1"/>
  <changelog author="mikhail.kasimov@gmail.com" date="1523016000">- Updated 10-ssl.conf (TLSv1.2 only) for lighttpd.conf in
  lighttpd_1.4.49-1.1.debian.tar.xz</changelog>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
</package>
<package pkgid="46f12ccb0f4079576ed4d65b11e898a6e175c528f49a7f6c751d15b0e269e355" name="lighttpd-mod_webdav-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="44743880534f4e9d9a64890501032609f146df59021313f2b5388bbb170894c6" name="lighttpd-mod_webdav-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="493a26b39d645fd13e02cb83a683610f691db6f4b7b45efd4879cbde41b45519" name="lighttpd-mod_webdav-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="f2296e9201a49d09380f557590b18893376bc2c33344eba9bb04244a58fb3775" name="lighttpd-mod_webdav-debuginfo" arch="s390x">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="4c24a91bfb08ca16015cd977250b762da9498a27c70b40d713e0518236a9717d" name="lighttpd-mod_webdav-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.67" rel="bp154.2.6.1"/>
  <changelog author="i@marguerite.su" date="1524916800">- workaround for tumbleweed
  * update-alternatives not expanded in the build VM
    due to unknown reasons, thus /usr/bin/pg_config
    is meaningless</changelog>
  <changelog author="dimstar@opensuse.org" date="1525262400">- Revert that pgsql workaround for tumbleweed: pampering over
  issues like this is just hiding problems. A real fix was
  submitted to the postgresql package instead.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570968000">- update to 1.4.54 (boo#1111733):
  * behavior change: strict URL parsing and normalization (configurable)
  * performance enhancements
  * bug fixes
- includes changes from 1.4.53:
  * TLS-ALPN-01
  * systemd socket activation
  * bug fixes
- includes changes from 1.4.52:
  * performance enhancements
  * bug fixes
- includes changes from 1.4.51:
  * new module: mod_authn_pam
  * multiple security fixes
    + process headers after combining folded headers
    + mod_userdir security: skip username "." and ".."
- includes changes from 1.4.50:
  * CVE-2018-19052: path traversal in mod_alias (boo#1115016)
  * security: use-after-free after invalid Range request
  * multiple bug fixes
- Fix build with PostgreSQL 11 in Tumbleweed (boo#1153722)
- Switch to unmodified upstream tarball, add upstream signing
  keys and verify source signature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- update to 1.4.55:
  * a multitude of bug fixes</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1583496000">- Remove deprecated GeoIP support (bsc#1156198)
  * drop mod_geoip subpackage</changelog>
  <changelog author="Alexander van Kaam &lt;alexvkaam@gmail.com&gt;" date="1593691200">- Changed /etc/logrotate.d/lighttpd from init.d to systemd
  fix boo#1146452.</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1595937600">- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist
  anymore</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1609156800">- Update to 1.4.58:
  * [mod_wolfssl] use wolfSSL TLS version defines
  * [mod_wolfssl] compile with earlier wolfSSL vers
  * [core] prefer IPv6+IPv4 func vs IPv4-specific func
  * [core] reuse large mem chunks (fix mem usage) (fixes #3033)
  * [core] add comment for FastCGI mem use in hctx-&gt;rb (#3033)
  * [mod_proxy] fix sending of initial reqbody chunked
  * [multiple] fdevent_waitpid() wrapper
  * [core] sys-time.h - localtime_r,gmtime_r macros
  * [core] http_date.[ch] encapsulate HTTP-date parse
  * [core] specialized strptime() for HTTP date fmts
  * [multiple] employ http_date.h, sys-time.h
  * [core] http_date_timegm() (portable timegm())
  * buffer_append_path_len() to join paths
  * [core] inet_ntop_cache -&gt; sock_addr_cache
  * [multiple] etag.[ch] -&gt; http_etag.[ch]; better imp
  * [core] fix crash after specific err in config file
  * [core] fix bug in FastCGI uploads (#3033)
  * [core] http_response_match_if_range()
  * [mod_webdav] typedef off_t loff_t for FreeBSD
  * [multiple] chunkqueue_write_chunk()
  * [build] add GNUMAKEFLAGS=--no-print-directory
  * [core] fix bug in read retry found by coverity
  * [core] attempt to quiet some coverity warnings
  * [mod_webdav] compile fix for Mac OSX/11
  * [core] handle U+00A0 in config parser
  * [core] fix lighttpd -1 one-shot with pipes
  * [core] quiet start/shutdown trace in one-shot mode
  * [core] allow keep-alives in one-shot mode (#3042)
  * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD
  * [core] setsockopt IPV6_V6ONLY if server.v4mapped
  * [core] prefer inet_aton() over inet_addr()
  * [core] add missing mod_wolfssl to ssl compat list
  * [mod_openssl] remove ancient preprocessor logic
  * [core] SHA512_Init, SHA512_Update, SHA512_Final
  * [mod_wolfssl] add complex preproc logic for SNI
  * [core] wrap a macro value with parens
  * [core] fix handling chunked response from backend (fixes #3044)
  * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)
  * [core] skip some trace if backend Upgrade (#3044)
  * [TLS] cert-staple.sh POSIX sh compat (fixes #3043)
  * [core] portability fix if st_mtime not defined
  * [mod_nss] portability fix
  * [core] warn if mod_authn_file needed in conf
  * [core] fix chunked decoding from backend (fixes #3044)
  * [core] reject excess data after chunked encoding (#3046)
  * [core] track chunked encoding state from backend (fixes #3046)
  * [core] li_restricted_strtoint64()
  * [core] track Content-Length from backend (fixes #3046)
  * [core] enhance config parsing debugging (#3047)
  * [core] reorder srv-&gt;config_context to match ndx (fixes #3047)
  * [mod_proxy] proxy.header = ("force-http10" =&gt; ...)
  * [mod_authn_ldap] fix crash (fixes #3048)
  * [mod_authn_ldap, mod_vhostdb_ldap] default cafile
  * [core] fix array_copy_array() sorted[]
  * [multiple] replace fall through comment with attr
  * [core] fix crash printing trace if backend is down
  * [core] fix decoding chunked from backend (fixes #3049)
  * [core] attempt to quiet some coverity warnings
  * [core] perf: request processing
  * [core] http_header_str_contains_token()
  * [mod_flv_streaming] parse query string w/o copying
  * [mod_evhost] use local array to split values
  * [core] remove srv-&gt;split_vals
  * [core] add User-Agent to http_header_e enum
  * [core] store struct server * in struct connection
  * [core] use func rc to indicate done reading header
  * [core] replace connection_set_state w/ assignment
  * [core] do not pass srv to http header parsing func
  * [core] cold buffer_string_prepare_append_resize()
  * [core] chunkqueue_compact_mem()
  * [core] connection_chunkqueue_compact()
  * [core] pass con around request, not srv and con
  * [core] reduce use of struct parse_header_state
  * [core] perf: HTTP header parsing using \n offsets
  * [core] no need to pass srv to connection_set_state
  * [core] perf: connection_read_header_more()
  * [core] perf: connection_read_header_hoff() hot
  * [core] inline connection_read_header()
  * [core] pass ptr to http_request_parse()
  * [core] more 'const' in request.c prototypes
  * [core] handle common case of alnum or - field-name
  * [mod_extforward] simplify code: use light_isxdigit
  * [core] perf: array.c performance enhancements
  * [core] mark some data_* funcs cold
  * [core] http_header.c internal inline funcs
  * [core] remove unused array_reset()
  * [core] prefer uint32_t to size_t in base.h
  * [core] uint32_t for struct buffer sizes
  * [core] remove unused members of struct server
  * [core] short-circuit path to clear request.headers
  * [core] array keys are non-empty in key-value list
  * [core] keep a-&gt;data[] sorted; remove a-&gt;sorted[]
  * [core] __attribute_returns_nonnull__
  * [core] differentiate array_get_* for ro and rw
  * [core] (const buffer *) in (struct burl_parts_t)
  * [core] (const buffer *) for con-&gt;server_name
  * [core] perf: initialize con-&gt;conf using memcpy()
  * [core] run config_setup_connection() fewer times
  * [core] isolate data_config.c, vector.c
  * [core] treat con-&gt;conditional_is_valid as bitfield
  * [core] http_header_hkey_get() over const array
  * [core] inline buffer as part of DATA_UNSET key
  * [core] inline buffer key for *_patch_connection()
  * [core] (data_unset *) from array_get_element_klen
  * [core] inline buffer as part of data_string value
  * [core] add const to callers of http_header_*_get()
  * [core] inline array as part of data_array value
  * [core] const char *op in data_config
  * [core] buffer string in data_config
  * [core] streamline config_check_cond()
  * [core] keep a-&gt;data[] sorted (REVERT)
  * [core] array a-&gt;sorted[] as ptrs rather than pos
  * [core] inline header and env arrays into con
  * [mod_accesslog] avoid alloc for parsing cookie val
  * [core] simpler config_check_cond()
  * [mod_redirect,mod_rewrite] store context_ndx
  * [core] const char *name in struct plugin
  * [core] srv-&gt;plugin_slots as compact list
  * [core] rearrange server_config, server members
  * [core] macros CONST_LEN_STR and CONST_STR_LEN
  * [core] struct plugin_data_base
  * [core] improve condition caching perf
  * [core] config_plugin_values_init() new interface
  * [mod_access] use config_plugin_values_init()
  * [core] (const buffer *) from strftime_cache_get()
  * [core] mv config_setup_connection to connections.c
  * [core] use (const char *) in config file parsing
  * [mod_staticfile] use config_plugin_values_init()
  * [mod_skeleton] use config_plugin_values_init()
  * [mod_setenv] use config_plugin_values_init()
  * [mod_alias] use config_plugin_values_init()
  * [mod_indexfile] use config_plugin_values_init()
  * [mod_expire] use config_plugin_values_init()
  * [mod_flv_streaming] use config_plugin_values_init()
  * [mod_magnet] use config_plugin_values_init()
  * [mod_usertrack] use config_plugin_values_init()
  * [mod_userdir] split policy from userdir path build
  * [mod_userdir] use config_plugin_values_init()
  * [mod_ssi] use config_plugin_values_init()
  * [mod_uploadprogress] use config_plugin_values_init()
  * [mod_status] use config_plugin_values_init()
  * [mod_cml] use config_plugin_values_init()
  * [mod_secdownload] use config_plugin_values_init()
  * [mod_geoip] use config_plugin_values_init()
  * [mod_evasive] use config_plugin_values_init()
  * [mod_trigger_b4_dl] use config_plugin_values_init()
  * [mod_accesslog] use config_plugin_values_init()
  * [mod_simple_vhost] use config_plugin_values_init()
  * [mod_evhost] use config_plugin_values_init()
  * [mod_vhostdb*] use config_plugin_values_init()
  * [mod_mysql_vhost] use config_plugin_values_init()
  * [mod_maxminddb] use config_plugin_values_init()
  * [mod_auth*] use config_plugin_values_init()
  * [mod_deflate] use config_plugin_values_init()
  * [mod_compress] use config_plugin_values_init()
  * [core] add xsendfile* check if xdocroot is NULL
  * [mod_cgi] use config_plugin_values_init()
  * [mod_dirlisting] use config_plugin_values_init()
  * [mod_extforward] use config_plugin_values_init()
  * [mod_webdav] use config_plugin_values_init()
  * [core] store addtl data in pcre_keyvalue_buffer
  * [mod_redirect] use config_plugin_values_init()
  * [mod_rewrite] use config_plugin_values_init()
  * [mod_rrdtool] use config_plugin_values_init()
  * [multiple] gw_backends config_plugin_values_init()
  * [core] config_get_config_cond_info()
  * [mod_openssl] use config_plugin_values_init()
  * [core] use config_plugin_values_init()
  * [core] collect more config logic into configfile.c
  * [core] config_plugin_values_init_block()
  * [core] gw_backend config_plugin_values_init_block
  * [core] remove old config_insert_values_*() funcs
  * [multiple] plugin.c handles common FREE_FUNC code
  * [core] run all trigger and sighup handlers
  * [mod_wstunnel] change DEBUG_LOG to use log_error()
  * [core] stat_cache_path_contains_symlink use errh
  * [core] isolate use of data_config, configfile.h
  * [core] split cond cache from cond matches
  * [mod_auth] inline arrays in http_auth_require_t
  * [core] array_init() arg for initial size
  * [core] gw_exts_clear_check_local()
  * [core] gw_backend less pointer chasing
  * [core] connection_handle_errdoc() separate func
  * [multiple] prefer (connection *) to (srv *)
  * [core] create http chunk header on the stack
  * [multiple] connection hooks no longer get (srv *)
  * [multiple] plugin_stats array
  * [core] read up-to fixed size chunk before fionread
  * [core] default chunk size 8k (was 4k)
  * [core] pass con around gw_backend instead of srv
  * [core] log_error_multiline_buffer()
  * [multiple] reduce direct use of srv-&gt;cur_ts
  * [multiple] extern log_epoch_secs
  * [multiple] reduce direct use of srv-&gt;errh
  * [multiple] stat_cache singleton
  * [mod_expire] parse config into structured data
  * [multiple] generic config array type checking
  * [multiple] rename r to rc rv rd wr to be different
  * [core] (minor) config_plugin_keys_t data packing
  * [core] inline buffer in log_error_st errh
  * [multiple] store srv-&gt;tmp_buf in tb var
  * [multiple] quiet clang compiler warnings
  * [core] http_status_set_error_close()
  * [core] http_request_host_policy w/ http_parseopts
  * [multiple] con-&gt;proto_default_port
  * [core] store log filename in (log_error_st *)
  * [core] separate log_error_open* funcs
  * [core] fdevent uses uint32_t instead of size_t
  * [mod_webdav] large buffer reuse
  * [mod_accesslog] flush file log buffer at 8k size
  * [core] include settings.h where used
  * [core] static buffers for mtime_cache
  * [core] convenience macros to check req methods
  * [core] support multiple error logs
  * [multiple] omit passing srv to fdevent_handler
  * [core] remove unused arg to fdevent_fcntl_set_nb*
  * [core] slightly simpify server_(over)load_check()
  * [core] isolate fdevent subsystem
  * [core] isolate stat_cache subsystem
  * [core] remove include base.h where unused
  * [core] restart dead piped loggers every 64 sec
  * [mod_webdav] use copy_file_range() if available
  * [core] perf: buffer copy and append
  * [core] copy some srv-&gt;srvconf into con-&gt;conf
  * [core] move keep_alive flag into request_st
  * [core] pass scheme port to http_request_parse()
  * [core] pass http_parseopts around request.c
  * [core] rename specific_config to request_config
  * [core] move request_st,request_config to request.h
  * [core] pass (request_st *) to request.c funcs
  * [core] remove unused request_st member 'request'
  * [core] rename content_length to reqbody_length
  * [core] t/test_request.c using (request_st *)
  * [core] (const connection *) in http_header_*_get()
  * [mod_accesslog] log_access_record() fmt log record
  * [core] move request start ts into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move addtl request-specific struct members
  * [core] move plugin_ctx into (request_st *)
  * [core] move addtl request-specific struct members
  * [core] move request state into (request_st *)
  * [core] store (plugin *) in p-&gt;data
  * [core] store subrequest_handler instead of mode
  * [multiple] copy small struct instead of memcpy()
  * [multiple] split con, request (very large change)
  * [core] r-&gt;uri.path always set, though might be ""
  * [core] C99 restrict on some base funcs
  * [core] dispatch handler in handle_request func
  * [core] http_request_parse_target()
  * [mod_magnet] modify r-&gt;target with "uri.path-raw"
  * [core] remove r-&gt;uri.path_raw; generate as needed
  * [core] http_response_comeback()
  * [core] http_response_config()
  * [tests] use buffer_eq_slen() for str comparison
  * [core] http_status_append() short-circuit 200 OK
  * [core] mark some chunk.c funcs as pure
  * [core] use uint32_t in http_header.[ch]
  * [core] perf: tighten some code in some hot paths
  * [core] parse header label before end of line
  * [mod_auth] "nonce_secret" option to validate nonce (fixes #2976)
  * [build] fix build on MacOS X Tiger
  * [doc] lighttpd.conf: lighttpd choose event-handler
  * [config] blank server.tag if whitespace-only
  * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)
  * [multiple] correct misspellings in comments
  * [multiple] fix some cc warnings in 32-bit, powerpc
  * [tests] fix skip count in mod-fastcgi w/o php-cgi
  * [multiple] ./configure --with-nettle to use Nettle
  * [core] skip excess close() when FD_CLOEXEC defined
  * [mod_cgi] remove redundant calls to set FD_CLOEXEC
  * [core] return EINVAL if stat_cache_get_entry w/o /
  * [mod_webdav] define PATH_MAX if not defined
  * [mod_accesslog] process backslash-escapes in fmt
  * [mod_openssl] disable cert vrfy if ALPN acme-tls/1
  * [core] add seed before openssl RAND_pseudo_bytes()
  * [mod_mbedtls] mbedTLS option for TLS
  * [core] prefer getxattr() instead of get_attr()
  * [multiple] use *(unsigned char *) with ctypes
  * [mod_openssl] do not log ECONNRESET unless debug
  * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING
  * [mod_gnutls] GnuTLS option for TLS (fixes #109)
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)
  * [mod_openssl] set chains from callback in 1.0.2+ (#2842)
  * [core] RFC-strict parse of Content-Length
  * [build] point ./configure --help to support forum
  * [core] stricter parse of numerical digits
  * [multiple] add summaries to top of some modules
  * [core] sys-crypto-md.h w/ inline message digest fn
  * [mod_openssl] enable read-ahead, if set, after SNI
  * [mod_openssl] issue warning for deprecated options
  * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail
  * [mod_openssl] use openssl feature define for ALPN
  * [mod_openssl] update default DH params
  * [core] SecureZeroMemory() on _WIN32
  * [core] safe memset calls memset() through volatile
  * [doc] update comments in doc/config/modules.conf
  * [core] more precise check for request stream flags
  * [mod_openssl] rotate session ticket encryption key
  * [mod_openssl] ssl.stek-file to specify encrypt key
  * [mod_mbedtls] ssl.stek-file to specify encrypt key
  * [mod_gnutls] ssl.stek-file to specify encrypt key
  * [mod_openssl] disable session cache; prefer ticket
  * [mod_openssl] compat with LibreSSL
  * [mod_openssl] compat with WolfSSL
  * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA
  * [mod_openssl] move SSL_CTX curve conf to new func
  * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs
  * [mod_openssl] OCSP stapling (fixes #2469)
  * [TLS] cert-staple.sh - refresh OCSP responses (#2469)
  * [mod_openssl] compat with BoringSSL
  * [mod_gnutls] option to override GnuTLS priority
  * [mod_gnutls] OCSP stapling (#2469)
  * [mod_extforward] config warning for module order
  * [mod_webdav] store webdav.opts as bitflags
  * [mod_webdav] limit webdav_propfind_dir() recursion
  * [mod_webdav] unsafe-propfind-follow-symlink option
  * [mod_webdav] webdav.opts "propfind-depth-infinity"
  * [mod_openssl] detect certs marked OCSP Must-Staple
  * [mod_gnutls] detect certs marked OCSP Must-Staple
  * [mod_openssl] default to set MinProtocol TLSv1.2
  * [mod_nss] NSS option for TLS (fixes #1218)
  * [core] fdevent_load_file() shared code
  * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file
  * [core] error if s-&gt;socket_perms chmod() fails
  * [mod_openssl] prefer some WolfSSL native APIs
  * quiet clang analyzer scan-build warnings
  * [core] uint32_t is plenty large for path names
  * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql
  * [core] splaytree_djbhash() in splaytree.h (reuse)
  * [cmake] update deps for src/t/test_*
  * [cmake] update deps for src/t/test_*
  * [build] remove tests/mod-userdir.t from builds
  * [build] fix typo in src/Makefile.am EXTRA_DIST
  * [core] remove unused mbedtls_enabled flag
  * [core] store fd in srv-&gt;stdin_fd during setup
  * [multiple] address coverity warnings
  * [mod_webdav] fix theoretical NULL dereference
  * [mod_webdav] update rc for PROPFIND allprop
  * [mod_webdav] build fix: ifdef live_properties
  * [multiple] address coverity warnings
  * [meson] fix libmariadb dependency
  * [meson] add missing libmaxminddb section
  * [mod_auth,mod_vhostdb] add caching option (fixes #2805)
  * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)
  * [mod_auth] accept "nonce-secret" &amp; "nonce_secret"
  * [mod_openssl] fix build warnings on MacOS X
  * [core] Nettle assert()s if buffer len &gt; digest sz
  * [mod_authn_dbi] authn backend employing DBI
  * [mod_authn_mysql,file] use crypt() to save stack
  * [mod_vhostdb_dbi] allow strings and ints in config
  * add ci-build.sh
  * move ci-build.sh to scripts
  * [build] build fixes for AIX
  * [mod_deflate] Brotli support
  * [build] bzip2 default to not-enabled in build
  * [mod_deflate] fix typo in config option
  * [mod_deflate] propagate errs from internal funcs
  * [mod_deflate] deflate.cache-dir compressed cache
  * [mod_deflate] mod_deflate subsumes mod_compress
  * [doc] mod_compress -&gt; mod_deflate
  * [tests] mod_compress -&gt; mod_deflate
  * [mod_compress] remove mod_compress
  * [build] add --with-brotli to CI build
  * [core] server.feature-flags extensible config
  * [core] con layer plugin_ctx separate from request
  * [multiple] con hooks store ctx in con-&gt;plugin_ctx
  * [core] separate funcs to reset (request_st *)
  * [multiple] rename connection_reset hook to request
  * [mod_nss] func renames for consistency
  * [core] detect and reject TLS connect to cleartext
  * [mod_deflate] quicker check for Content-Encoding
  * [mod_openssl] read secret data w/ BIO_new_mem_buf
  * [core] decode Transfer-Encoding: chunked from gw
  * [mod_fastcgi] decode Transfer-Encoding: chunked
  * [core] stricter parsing of POST chunked block hdr
  * [mod_proxy] send HTTP/1.1 requests to backends
  * [tests] test_base64.c clear buf vs reset
  * [core] http_header_remove_token()
  * [mod_webdav] fix inadvertent string truncation
  * [core] add some missing standard includes
  * [mod_extforward] attempt to quiet Coverity warning
  * [mod_authn_dbi,mod_authn_mysql] fix coverity issue
  * scons: fix check environment
  * Add avahi service file under doc/avahi/
  * [mod_webdav] fix fallback if linkat() fails
  * [mod_proxy] do not forward Expect: 100-continue
  * [core] chunkqueue_compact_mem() must upd cq-&gt;last
  * [core] dlsym for FAMNoExists() for compat w/ fam
  * [core] disperse settings.h to appropriate headers
  * [core] inline buffer_reset()
  * [mod_extforward] save proto per connection
  * [mod_extforward] skip after HANDLER_COMEBACK
  * [core] server.feature-flags to enable h2
  * [core] HTTP_VERSION_2
  * [multiple] allow TLS ALPN "h2" if "server.h2proto"
  * [mod_extforward] preserve changed addr for h2 con
  * [core] do not send Connection: close if h2
  * [core] lowercase response hdr field names for h2
  * [core] recognize status: 421 Misdirected Request
  * [core] parse h2 pseudo-headers
  * [core] request_headers_process()
  * [core] connection_state_machine_loop()
  * [core] reset connection counters per connection
  * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting
  * [core] connection_set_fdevent_interest()
  * [core] HTTP2-Settings
  * [core] adjust http_request_headers_process()
  * [core] http_header_parse_hoff()
  * [core] move http_request_headers_process()
  * [core] reqpool.[ch] for (request_st *)
  * [multiple] modules read reqbody via fn ptr
  * [multiple] isolate more con code in connections.c
  * [core] isolate more resp code in response.c
  * [core] h2.[ch] with stub funcs (incomplete)
  * [core] alternate between two joblists
  * [core] connection transition to HTTP/2; incomplete
  * [core] mark some error paths with attribute cold
  * [core] discard 100 102 103 responses from backend
  * [core] skip write throttle for 100 Continue
  * [core] adjust (disabled) debug code
  * [core] update comment
  * [core] link in ls-hpack (EXPERIMENTAL)
  * [core] HTTP/2 HPACK using LiteSpeed ls-hpack
  * [core] h2_send_headers() specialized for resp hdrs
  * [core] http_request_parse_header() specialized
  * [core] comment possible future ls-hpack optimize
  * [mod_status] separate funcs to print request table
  * [mod_status] adjust to print HTTP/2 requests
  * [core] redirect to dir using relative-path
  * [core] ignore empty field-name from backends
  * [mod_auth] fix crash if auth.require misconfigured (fixes #3023)
  * [core] fix 1-char trunc of default server.tag
  * [core] request_acquire(), request_release()
  * [core] keep pool of (request_st *) for HTTP/2
  * [mod_status] dedicated funcs for r-&gt;state labels
  * [core] move connections_get_state to connections.c
  * [core] fix crash on master after graceful restart
  * [core] defer optimization to read small files
  * [core] do not require '\0' term for k,v hdr parse
  * [scripts] cert-staple.sh enhancements
  * [core] document algorithm used in lighttpd etag
  * [core] ls-hpack optimizations
  * [core] fix crash on master if blank line request
  * [core] use djbhash in gw_backend to choose host
  * [core] rename md5.[ch] to algo_md5.[ch]
  * [core] move djbhash(), dekhash() to algo_md.h
  * [core] rename splaytree.[ch] to algo_splaytree.[ch]
  * [core] import xxHash v0.8.0
  * [build] modify build, includes for xxHash v0.8.0
  * [build] remove ls-hpack/deps
  * [core] xxhash no inline hints; let compiler choose
  * [mod_dirlisting] fix config parsing crash
  * [mod_openssl] clarify trace w/ deprecated options
  * [doc] refresh doc/config/*/*
  * [core] code size: disable XXH64(), XXH3()
  * [doc] update README and INSTALL
  * [core] combine Cookie request headers with ';'
  * [core] log stream id with debug.log-state-handling
  * [core] set r-&gt;state in h2.c
  * [mod_ssi] update chunk after shell output redirect
  * [mod_webdav] preserve bytes_out when chunks merged
  * [multiple] inline chunkqueue_length()
  * [core] cold h2_log_response_header*() funcs
  * [core] update HTTP status codes list from IANA
  * [mod_wolfssl] standalone module
  * [core] Content-Length in http_response_send_file()
  * [core] adjust response header prep for common case
  * [core] light_isupper(), light_islower()
  * [core] tst,set,clr macros for r-&gt;{rqst,resp}_htags
  * [core] separate http_header_e from _htags bitmask
  * [core] http_header_hkey_get_lc() for HTTP/2
  * [core] array.[ch] using uint32_t instead of size_t
  * [core] extend (data_string *) to store header id
  * [multiple] extend enum http_header_e list
  * [core] http_header_e &lt;=&gt; lshpack_static_hdr_idx
  * [core] skip ls-hpack decode work unused by lighttpd
  * [TLS] error if inherit empty TLS cfg from globals
  * [core] connection_check_expect_100()
  * [core] support multiple 1xx responses from backend
  * [core] reload c after chunkqueue_compact_mem()
  * [core] relay 1xx from backend over HTTP/2
  * [core] relay 1xx from backend over HTTP/1.1
  * [core] chunkqueue_{peek,read}_data(), squash
  * [multiple] TLS modules use chunkqueue_peek_data()
  * [mod_magnet] magnet.attract-response-start-to
  * [multiple] code reuse chunkqueue_peek_data()
  * [core] reuse r-&gt;start_hp.tv_sec for r-&gt;start_ts
  * [core] config_plugin_value_tobool() accept "0","1"
  * [core] graceful and immediate restart option
  * [mod_ssi] init status var before waitpid()
  * [core] graceful shutdown timeout option
  * [core] lighttpd -1 supports pipes (e.g. netcat)
  * [core] perf adjustments to avoid load miss
  * [multiple] use sock_addr_get_family in more places
  * [multiple] inline chunkqueue where always alloc'd
  * [core] propagate state after writing
  * [core] server_run_con_queue()
  * [core] defer handling FDEVENT_HUP and FDEVENT_ERR
  * [core] handle unexpected EOF reading FILE_CHUNK
  * [core] short-circuit connection_write_throttle()
  * [core] walk queue in connection_write_chunkqueue()
  * [core] connection_joblist global
  * [core] be more precise checking streaming flags
  * [core] fdevent_load_file_bytes()
  * [TLS] use fdevent_load_file_bytes() for STEK file
  * [core] allow symlinks under /dev for rand devices
  * [multiple] use light_btst() for hdr existence chk
  * [mod_deflate] fix potential NULL deref in err case
  * [core] save errno around close() if fstat() fails
  * [mod_ssi] use stat_cache_open_rdonly_fstat()
  * [core] fdevent_dup_cloexec()
  * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK
  * [core] stat_cache_path_isdir()
  * [multiple] use stat_cache_path_isdir()
  * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset
  * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset
  * [core] limit num ranges in Range requests
  * [core] remove unused r-&gt;content_length
  * [core] http_response_parse_range() const file sz
  * [core] pass open fd to http_response_parse_range
  * [core] stat_cache_get_entry_open()
  * [core,mod_deflate] leverage cache of open fd
  * [doc] comment out config disabling Range for .pdf
  * [core] coalesce nearby ranges in Range requests
  * [mod_fastcgi] decode chunked is cold code path
  * [core] fix chunkqueue_compact_mem w/ partial chunk
  * [core] alloc optim reading file, sending chunked
  * [core] reuse chunkqueue_compact_mem*()
  * [mod_cgi] use splice() to send input to CGI
  * [multiple] ignore openssl 3.0.0 deprecation warns
  * [mod_openssl] migrate ticket cb to openssl 3.0.0
  * [mod_openssl] construct OSSL_PARAM on stack
  * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls
  * [multiple] openssl 3.0.0 digest interface migrate
  * [tests] detect multiple SSL/TLS/crypto providers
  * [core] sys-crypto-md.h consistent interfaces
  * [wolfssl] wolfSSL_CTX_set_mode differs from others
  * [multiple] use NSS crypto if no other crypto avail
  * [multiple] stat_cache_path_stat() for struct st
  * [TLS] ignore empty "CipherString" in ssl-conf-cmd
  * [multiple] remove chunk file.start member
  * [core] modify use of getrlimit() to not be fatal
  * [mod_webdav] add missing update to cq accounting
  * [mod_webdav] update defaults after worker_init
  * [mod_openssl] use newer openssl 3.0.0 func
  * [core] config_plugin_value_to_int32()
  * [core] minimize pause during graceful restart
  * [mod_deflate] use large mmap chunks to compress
  * [core] stat_cache_entry reference counting
  * [core] FILE_CHUNK can hold stat_cache_entry ref
  * [core] http_chunk_append_file_ref_range()
  * [multiple] use http_chunk_append_file_ref()
  * [core] always lseek() with shared fd
  * [core] silence coverity warnings (false positives)
  * [core] silence coverity warnings in ls-hpack
  * [core] silence coverity warnings (another try)
  * [core] fix fd sharing when splitting file chunk
  * [mod_mbedtls] quiet unused variable warning
  * [core] use inline funcs in sys-crypto-md.h
  * [core] add missing declaration for NSS rand
  * [core] init NSS lib for basic crypto algorithms
  * [doc] change mod_compress refs to mod_deflate
  * [doc] replace bzip2 refs with brotli
  * [build] remove svnversion from versionstamp rule
  * [doc] /var/run -&gt; /run
  * [multiple] test for nss includes
  * [mod_nss] more nss includes fixes
  * [mod_webdav] define _NETBSD_SOURCE on NetBSD
  * [core] silence coverity warnings (another try)
  * [mod_mbedtls] newer mbedTLS vers support TLSv1.3
  * [mod_accesslog] update defaults after cycling log
  * [multiple] add some missing config cleanup
  * [core] fix (startup) mem leaks in configparser.y
  * [core] STAILQ_* -&gt; SIMPLEQ_* on OpenBSD
  * [mod_wolfssl] use more wolfssl/options.h defines
  * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL
  * [mod_wolfssl] need to build --enable-alpn for ALPN
  * [mod_secdownload] fix compile w/ NSS on FreeBSD
  * [mod_mbedtls] wrap addtl code in preproc defines
  * [TLS] server.feature-flags "ssl.session-cache"
  * [core] workaround fragile code in wolfssl types.h
  * [core] move misplaced error trace to match option
  * [core] adjust wolfssl workaround for another case
  * [multiple] consistent order for crypto lib select
  * [multiple] include mbedtls/config.h after select
  * [multiple] include wolfssl/options.h after select
  * [core] set NSS_VER_INCLUDE after crypto lib select
  * [core] use system xxhash lib if available
  * [doc] refresh doc/config/conf.d/mime.conf
  * [meson] add matching -I for lua lib version
  * [build] prepend search for lua version 5.4
  * [core] use inotify in stat_cache.[ch] on Linux
  * [build] detect inotify header &lt;sys/inotify.h&gt;
  * [mod_nss] update session ticket NSS devel comment
  * [core] set last_used on rd/wr from backend (fixes #3029)
  * [core] cold func for gw_recv_response error case
  * [core] use kqueue() instead of FAM/gamin on *BSD
  * [core] no graceful-restart-bg on OpenBSD, NetBSD
  * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks
  * [core] use struct kevent on stack in stat_cache
  * [core] stat_cache preprocessor paranoia
  * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check
  * [mod_maxminddb] fix config validation typo
  * [tests] allow LIGHTTPD_EXE_PATH override
  * [multiple] handle NULL val as empty in *_env_add (fixes #3030)
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (fixes #3031)
  * [build] check for xxhash in more ways
  * [core] accept "HTTP/2.0", "HTTP/3.0" from backends (#3031)
  * [core] http_response_buffer_append_authority()
  * [core] define SHA*_DIGEST_LENGTH macros if missing
  * [doc] update optional pkg dependencies in INSTALL
  * [mod_alias] validate given order, not sorted order
  * [core] filter out duplicate modules
  * [mod_cgi] fix crash if initial write to CGI fails
  * [mod_cgi] ensure tmp file open() before splice()
  * [multiple] add back-pressure gw data pump (fixes #3033)
  * [core] fix bug when HTTP/2 frames span chunks
  * [multiple] more forgiving config str to boolean (fixes #3036)
  * [core] check for __builtin_expect() availability
  * [core] quiet more request parse errs unless debug
  * [core] consolidate chunk size checks
  * [mod_flv_streaming] use stat_cache_get_entry_open
  * [mod_webdav] pass full path to webdav_unlinkat()
  * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail
  * [mod_fastcgi] move src/fastcgi.h into src/compat/
  * [mod_status] add additional HTML-encoding
  * [core] server.v4mapped option
  * [mod_webdav] workaround for gvfs dir redir bug</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1626609600">- update to 1.4.59:
  * HTTP/2 enabled by default
  * mod_deflate zstd suppport
  * new mod_ajp13</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1632225600">- Fix squatted descriptions.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633435200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_lighttpd.service.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1635076800">- update to 1.4.60:
  * HTTP/2 smoother and lower memory use (in general)
  * HTTP/2 tuning to better handle aggressive client initial
    requests
  * reduce memory footprint; workaround poor glibc behavior;
    jemalloc is better
  * mod_magnet lua performance improvements
  * mod_dirlisting performance improvements and new caching option
  * memory constraints for extreme edge cases in mod_dirlisting,
    mod_ssi, mod_webdav
  * connect(), write(), read() time limits on backends (separate
    from client timeouts)
  * lighttpd restarts if large discontinuity in time occurs
    (embedded systems)
  * RFC7233 Range support for all non-streaming responses, not
    only static files
  * connect() to backend now has default 8 second timeout
    (configurable)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1637496000">- update to 1.4.61:
  * mod_dirlisting: sort "../" to top
  * fix HTTP/2 upload &gt; 64k w/ max-request-size
  * code level and developer visible bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1638619200">- update to 1.4.63:
  * import xxHash v0.8.1
  * fix reqpool mem corruption in 1.4.62
- includes changes in 1.4.62:
  * [mod_alias] fix use-after-free bug
  * many developer visible bug fixes
- build with pcre2 and without libev, as per upcoming deprecation</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1642852800">- update to 1.4.64:
  * CVE-2022-22707: off-by-one stack overflow in the mod_extforward
    plugin (boo#1194376)
  * graceful restart/shutdown timeout changed from 0 (disabled) to
    8 seconds. configure an alternative with:
    server.feature-flags += (?server.graceful-shutdown-timeout? =&gt; 8)
  * deprecated modules (previously announced) have been removed:
    mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,
    mod_geoip, mod_trigger_b4_dl</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1643889600">- Set ProtectHome to read-only, otherwise access to the users public_html can
  break (bsc#1195465)</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1655812800">- update to 1.4.65:
  * WebSockets over HTTP/2
  * RFC 8441 Bootstrapping WebSockets with HTTP/2
  * HTTP/2 PRIORITY_UPDATE
  * RFC 9218 Extensible Prioritization Scheme for HTTP
  * prefix/suffix conditions in lighttpd.conf
  * mod_webdav safe partial-PUT
  * webdav.opts += (?partial-put-copy-modify? =&gt; ?enable?)
  * mod_accesslog option: accesslog.escaping = ?json?
  * mod_deflate libdeflate build option
  * speed up request body uploads via HTTP/2
  * Behavior Changes
  * change default server.max-keep-alive-requests = 1000 to adjust
  * to increasing HTTP/2 usage and to web2/web3 application usage
  * (prior default was 100)
  * mod_status HTML now includes HTTP/2 control stream id 0 in the output
  * which contains aggregate counts for the HTTP/2 connection
  * (These lines can be identified with URL ?*?, part of ?PRI *? preface)
  * alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
  * MIME type application/javascript is translated to text/javascript (RFC 9239)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1663070400">- update to 1.4.66:
  * a number of bug fixes
  * Fix HTTP/2 downloads &gt;= 4GiB
  * Fix SIGUSR1 graceful restart with TLS
  * futher bug fixes
  * CVE-2022-37797: null pointer dereference in mod_wstunnel,
    possibly a remotely triggerable crash (boo#1203358)
  * In an upcoming release the TLS modules will default to using
    stronger, modern chiphers and will default to allow client
    preference in selecting ciphers.
    ?CipherString? =&gt; ?EECDH+AESGCM:AES256+EECDH:CHACHA20:SHA256:!SHA384?,
    ?Options? =&gt; ?-ServerPreference?
    old defaults:
    ?CipherString? =&gt; ?HIGH?,
    ?Options? =&gt; ?ServerPreference?
  * A number of TLS options are how deprecated and will be removed
    in a future release:
    ? ssl.honor-cipher-order
    ? ssl.dh-file
    ? ssl.ec-curve
    ? ssl.disable-client-renegotiation
    ? ssl.use-sslv2
    ? ssl.use-sslv3
    The replacement option is ssl.openssl.ssl-conf-cmd, but lighttpd
    defaults should be prefered
  * A number of modules are now deprecated and will be removed in a
    future release: mod_evasive, mod_secdownload, mod_uploadprogress,
    mod_usertrack can be replaced by mod_magnet and a few lines of lua.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1663934400">- update to 1.4.67:
  * Update comment about TCP_INFO on OpenBSD
  * [mod_ajp13] fix crash with bad response headers (fixes #3170)
  * [core] handle RDHUP when collecting chunked body
    CVE-2022-41556 boo#1203872
  * [core] tweak streaming request body to backends
  * [core] handle ENOSPC with pwritev() (#3171)
  * [core] manually calculate off_t max (fixes #3171)
  * [autoconf] force large file support (#3171)
  * [multiple] quiet coverity warnings using casts
  * [meson] add license keyword to project declaration</changelog>
</package>
<package pkgid="dc80996d3e23a88e6af5504ab22d70667da60c9018f3095c039572517621b573" name="lilypond-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.24.1" rel="bp154.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add netpbm BuildRequires: needed for pngtopnm.</changelog>
  <changelog author="tjcw@physics.org" date="1435752000">- Add netpbm BuildRequires in all paths, to fix build break</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Use correct vim directory
- Cleanup of the spec file
  * Install info files correctly (fixes RPMLint warnings)</changelog>
  <changelog author="bwiedemann@suse.com" date="1496318400">- Add reproducible.patch to sort input files (boo#1041090),
  to override current timestamp and to not have random uniqueIds
  to make build more reproducible</changelog>
  <changelog author="j.mairboeck@gmail.com" date="1496664000">- Add Avoid-segfault-in-grob.cc-with-gcc-6.patch to fix crash on
  newer systems with gcc 6 or newer. This also fixes the doc build.
  The patch is from:
  https://sourceforge.net/p/testlilyissues/issues/4814/
  (upstream bug tracker).</changelog>
  <changelog author="davejplater@gmail.com" date="1526385600">- Fix boo#1093056 CVE-2018-10992 with Debian patch
  use_system_correctly.patch.
- Added 0101-read_relocation_dir-in-lilypond_datadir-too.patch
  hurd_file_name_support.patch
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff
  add_dircategories_to_documentation.patch
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff
  add_set-global-fonts_function.patch
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff and
  use_cstring_and_ctype_includes.patch from Debian.</changelog>
  <changelog author="davejplater@gmail.com" date="1540900800">- Removed requirement for autotrace which was needed by mftrace
  and replaced with potrace. See boo#1040278</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1557748800">- Fix build against glib2 &gt;= 2.60.2 by manually adding:
  - lglib-2.0 -lgobject-2.0 to the linker flags.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1582286400">- Work around boo#1163190 by requiring pkgconfig(cairo) for 15.2</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1587384000">- Use %license</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1588852800">- Update to version 2.20.0.
- Removed incorporated and obsolete patches:
  Avoid-segfault-in-grob.cc-with-gcc-6.patch,
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff,
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff,
  add_set-global-fonts_function.patch, hurd_file_name_support.patch,
  lilypond-doc-texinfo4.patch and  use_system_correctly.patch.
- lilypond-century-schoolbook-l-fonts replaced by
  lilypond-texgy-fonts.
- Lots of upstream new features and fixes, see:
  /usr/share/doc/packages/lilypond/NEWS.txt</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1596715200">- Add patch from git to fix boo#1174949 - CVE-2020-17353:
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1610452800">- Update to version 2.22.0 and remove incorporated patches:
  0101-read_relocation_dir-in-lilypond_datadir-too.patch and
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch
- Upstream changes:
  * Displaying pitch improvements
  * Rhythm improvements
  * Expressive mark improvements
  * Editorial annotation improvements
  * Vocal music improvements
  * Unfretted and fretted string instrument improvements
  * Chord notation improvements
  * Contemporary music improvements
  * Input file improvements
  * Output improvements</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Fix factory build by requiring t1utils for the build.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1629547200">- Update to 2.23.3
- Update dependencies:
  * Add texlive-bibtex-bin build requirement.
  * Use sil-gentium-fonts instead of gentium.
- Remove deprecated scripts in spec file.
- Refreshed patches:
  * reproducible.patch
  * add_dircategories_to_documentation.patch
  * use_cstring_and_ctype_includes.patch
- Update _constraints to let lilypond-doc build.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1633003200">- Exclude all 32 bit builds.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1676289600">- Remove linked lilypond-doc package and use one spec file</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1684324800">- Update to Factory version lilypond-2.24.1 to fix boo#1210502 -
  CVE-2020-17354: lilypond: Lilypond allows attackers to bypass
  the -dsafe protection mechanism.
- Added lilypond-missing-lgc.patch and removed obsolete
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff</changelog>
</package>
<package pkgid="aff360ace918b2b324f807911ca7454ec7da6e00df190909bd1c5c2597dd5302" name="lilypond-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.24.1" rel="bp154.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add netpbm BuildRequires: needed for pngtopnm.</changelog>
  <changelog author="tjcw@physics.org" date="1435752000">- Add netpbm BuildRequires in all paths, to fix build break</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Use correct vim directory
- Cleanup of the spec file
  * Install info files correctly (fixes RPMLint warnings)</changelog>
  <changelog author="bwiedemann@suse.com" date="1496318400">- Add reproducible.patch to sort input files (boo#1041090),
  to override current timestamp and to not have random uniqueIds
  to make build more reproducible</changelog>
  <changelog author="j.mairboeck@gmail.com" date="1496664000">- Add Avoid-segfault-in-grob.cc-with-gcc-6.patch to fix crash on
  newer systems with gcc 6 or newer. This also fixes the doc build.
  The patch is from:
  https://sourceforge.net/p/testlilyissues/issues/4814/
  (upstream bug tracker).</changelog>
  <changelog author="davejplater@gmail.com" date="1526385600">- Fix boo#1093056 CVE-2018-10992 with Debian patch
  use_system_correctly.patch.
- Added 0101-read_relocation_dir-in-lilypond_datadir-too.patch
  hurd_file_name_support.patch
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff
  add_dircategories_to_documentation.patch
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff
  add_set-global-fonts_function.patch
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff and
  use_cstring_and_ctype_includes.patch from Debian.</changelog>
  <changelog author="davejplater@gmail.com" date="1540900800">- Removed requirement for autotrace which was needed by mftrace
  and replaced with potrace. See boo#1040278</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1557748800">- Fix build against glib2 &gt;= 2.60.2 by manually adding:
  - lglib-2.0 -lgobject-2.0 to the linker flags.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1582286400">- Work around boo#1163190 by requiring pkgconfig(cairo) for 15.2</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1587384000">- Use %license</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1588852800">- Update to version 2.20.0.
- Removed incorporated and obsolete patches:
  Avoid-segfault-in-grob.cc-with-gcc-6.patch,
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff,
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff,
  add_set-global-fonts_function.patch, hurd_file_name_support.patch,
  lilypond-doc-texinfo4.patch and  use_system_correctly.patch.
- lilypond-century-schoolbook-l-fonts replaced by
  lilypond-texgy-fonts.
- Lots of upstream new features and fixes, see:
  /usr/share/doc/packages/lilypond/NEWS.txt</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1596715200">- Add patch from git to fix boo#1174949 - CVE-2020-17353:
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1610452800">- Update to version 2.22.0 and remove incorporated patches:
  0101-read_relocation_dir-in-lilypond_datadir-too.patch and
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch
- Upstream changes:
  * Displaying pitch improvements
  * Rhythm improvements
  * Expressive mark improvements
  * Editorial annotation improvements
  * Vocal music improvements
  * Unfretted and fretted string instrument improvements
  * Chord notation improvements
  * Contemporary music improvements
  * Input file improvements
  * Output improvements</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Fix factory build by requiring t1utils for the build.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1629547200">- Update to 2.23.3
- Update dependencies:
  * Add texlive-bibtex-bin build requirement.
  * Use sil-gentium-fonts instead of gentium.
- Remove deprecated scripts in spec file.
- Refreshed patches:
  * reproducible.patch
  * add_dircategories_to_documentation.patch
  * use_cstring_and_ctype_includes.patch
- Update _constraints to let lilypond-doc build.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1633003200">- Exclude all 32 bit builds.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1676289600">- Remove linked lilypond-doc package and use one spec file</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1684324800">- Update to Factory version lilypond-2.24.1 to fix boo#1210502 -
  CVE-2020-17354: lilypond: Lilypond allows attackers to bypass
  the -dsafe protection mechanism.
- Added lilypond-missing-lgc.patch and removed obsolete
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff</changelog>
</package>
<package pkgid="a3075241f03a181ac480b7f66aa0f68a136bf2af4763fbfbd1ba5ba058143931" name="lilypond-debuginfo" arch="s390x">
  <version epoch="0" ver="2.24.1" rel="bp154.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add netpbm BuildRequires: needed for pngtopnm.</changelog>
  <changelog author="tjcw@physics.org" date="1435752000">- Add netpbm BuildRequires in all paths, to fix build break</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Use correct vim directory
- Cleanup of the spec file
  * Install info files correctly (fixes RPMLint warnings)</changelog>
  <changelog author="bwiedemann@suse.com" date="1496318400">- Add reproducible.patch to sort input files (boo#1041090),
  to override current timestamp and to not have random uniqueIds
  to make build more reproducible</changelog>
  <changelog author="j.mairboeck@gmail.com" date="1496664000">- Add Avoid-segfault-in-grob.cc-with-gcc-6.patch to fix crash on
  newer systems with gcc 6 or newer. This also fixes the doc build.
  The patch is from:
  https://sourceforge.net/p/testlilyissues/issues/4814/
  (upstream bug tracker).</changelog>
  <changelog author="davejplater@gmail.com" date="1526385600">- Fix boo#1093056 CVE-2018-10992 with Debian patch
  use_system_correctly.patch.
- Added 0101-read_relocation_dir-in-lilypond_datadir-too.patch
  hurd_file_name_support.patch
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff
  add_dircategories_to_documentation.patch
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff
  add_set-global-fonts_function.patch
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff and
  use_cstring_and_ctype_includes.patch from Debian.</changelog>
  <changelog author="davejplater@gmail.com" date="1540900800">- Removed requirement for autotrace which was needed by mftrace
  and replaced with potrace. See boo#1040278</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1557748800">- Fix build against glib2 &gt;= 2.60.2 by manually adding:
  - lglib-2.0 -lgobject-2.0 to the linker flags.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1582286400">- Work around boo#1163190 by requiring pkgconfig(cairo) for 15.2</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1587384000">- Use %license</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1588852800">- Update to version 2.20.0.
- Removed incorporated and obsolete patches:
  Avoid-segfault-in-grob.cc-with-gcc-6.patch,
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff,
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff,
  add_set-global-fonts_function.patch, hurd_file_name_support.patch,
  lilypond-doc-texinfo4.patch and  use_system_correctly.patch.
- lilypond-century-schoolbook-l-fonts replaced by
  lilypond-texgy-fonts.
- Lots of upstream new features and fixes, see:
  /usr/share/doc/packages/lilypond/NEWS.txt</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1596715200">- Add patch from git to fix boo#1174949 - CVE-2020-17353:
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1610452800">- Update to version 2.22.0 and remove incorporated patches:
  0101-read_relocation_dir-in-lilypond_datadir-too.patch and
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch
- Upstream changes:
  * Displaying pitch improvements
  * Rhythm improvements
  * Expressive mark improvements
  * Editorial annotation improvements
  * Vocal music improvements
  * Unfretted and fretted string instrument improvements
  * Chord notation improvements
  * Contemporary music improvements
  * Input file improvements
  * Output improvements</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Fix factory build by requiring t1utils for the build.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1629547200">- Update to 2.23.3
- Update dependencies:
  * Add texlive-bibtex-bin build requirement.
  * Use sil-gentium-fonts instead of gentium.
- Remove deprecated scripts in spec file.
- Refreshed patches:
  * reproducible.patch
  * add_dircategories_to_documentation.patch
  * use_cstring_and_ctype_includes.patch
- Update _constraints to let lilypond-doc build.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1633003200">- Exclude all 32 bit builds.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1676289600">- Remove linked lilypond-doc package and use one spec file</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1684324800">- Update to Factory version lilypond-2.24.1 to fix boo#1210502 -
  CVE-2020-17354: lilypond: Lilypond allows attackers to bypass
  the -dsafe protection mechanism.
- Added lilypond-missing-lgc.patch and removed obsolete
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff</changelog>
</package>
<package pkgid="9a3c650a72d87cb6d14db5612b60d6762c14dca699d32d5a522deeee86c77cf1" name="lilypond-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.24.1" rel="bp154.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add netpbm BuildRequires: needed for pngtopnm.</changelog>
  <changelog author="tjcw@physics.org" date="1435752000">- Add netpbm BuildRequires in all paths, to fix build break</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Use correct vim directory
- Cleanup of the spec file
  * Install info files correctly (fixes RPMLint warnings)</changelog>
  <changelog author="bwiedemann@suse.com" date="1496318400">- Add reproducible.patch to sort input files (boo#1041090),
  to override current timestamp and to not have random uniqueIds
  to make build more reproducible</changelog>
  <changelog author="j.mairboeck@gmail.com" date="1496664000">- Add Avoid-segfault-in-grob.cc-with-gcc-6.patch to fix crash on
  newer systems with gcc 6 or newer. This also fixes the doc build.
  The patch is from:
  https://sourceforge.net/p/testlilyissues/issues/4814/
  (upstream bug tracker).</changelog>
  <changelog author="davejplater@gmail.com" date="1526385600">- Fix boo#1093056 CVE-2018-10992 with Debian patch
  use_system_correctly.patch.
- Added 0101-read_relocation_dir-in-lilypond_datadir-too.patch
  hurd_file_name_support.patch
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff
  add_dircategories_to_documentation.patch
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff
  add_set-global-fonts_function.patch
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff and
  use_cstring_and_ctype_includes.patch from Debian.</changelog>
  <changelog author="davejplater@gmail.com" date="1540900800">- Removed requirement for autotrace which was needed by mftrace
  and replaced with potrace. See boo#1040278</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1557748800">- Fix build against glib2 &gt;= 2.60.2 by manually adding:
  - lglib-2.0 -lgobject-2.0 to the linker flags.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1582286400">- Work around boo#1163190 by requiring pkgconfig(cairo) for 15.2</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1587384000">- Use %license</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1588852800">- Update to version 2.20.0.
- Removed incorporated and obsolete patches:
  Avoid-segfault-in-grob.cc-with-gcc-6.patch,
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff,
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff,
  add_set-global-fonts_function.patch, hurd_file_name_support.patch,
  lilypond-doc-texinfo4.patch and  use_system_correctly.patch.
- lilypond-century-schoolbook-l-fonts replaced by
  lilypond-texgy-fonts.
- Lots of upstream new features and fixes, see:
  /usr/share/doc/packages/lilypond/NEWS.txt</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1596715200">- Add patch from git to fix boo#1174949 - CVE-2020-17353:
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1610452800">- Update to version 2.22.0 and remove incorporated patches:
  0101-read_relocation_dir-in-lilypond_datadir-too.patch and
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch
- Upstream changes:
  * Displaying pitch improvements
  * Rhythm improvements
  * Expressive mark improvements
  * Editorial annotation improvements
  * Vocal music improvements
  * Unfretted and fretted string instrument improvements
  * Chord notation improvements
  * Contemporary music improvements
  * Input file improvements
  * Output improvements</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Fix factory build by requiring t1utils for the build.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1629547200">- Update to 2.23.3
- Update dependencies:
  * Add texlive-bibtex-bin build requirement.
  * Use sil-gentium-fonts instead of gentium.
- Remove deprecated scripts in spec file.
- Refreshed patches:
  * reproducible.patch
  * add_dircategories_to_documentation.patch
  * use_cstring_and_ctype_includes.patch
- Update _constraints to let lilypond-doc build.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1633003200">- Exclude all 32 bit builds.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1676289600">- Remove linked lilypond-doc package and use one spec file</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1684324800">- Update to Factory version lilypond-2.24.1 to fix boo#1210502 -
  CVE-2020-17354: lilypond: Lilypond allows attackers to bypass
  the -dsafe protection mechanism.
- Added lilypond-missing-lgc.patch and removed obsolete
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff</changelog>
</package>
<package pkgid="7f0f8331cd203f30f15fcdc5484298bfe36e188391dfa9a8c75e1b18999de382" name="lilypond-debugsource" arch="aarch64">
  <version epoch="0" ver="2.24.1" rel="bp154.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add netpbm BuildRequires: needed for pngtopnm.</changelog>
  <changelog author="tjcw@physics.org" date="1435752000">- Add netpbm BuildRequires in all paths, to fix build break</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Use correct vim directory
- Cleanup of the spec file
  * Install info files correctly (fixes RPMLint warnings)</changelog>
  <changelog author="bwiedemann@suse.com" date="1496318400">- Add reproducible.patch to sort input files (boo#1041090),
  to override current timestamp and to not have random uniqueIds
  to make build more reproducible</changelog>
  <changelog author="j.mairboeck@gmail.com" date="1496664000">- Add Avoid-segfault-in-grob.cc-with-gcc-6.patch to fix crash on
  newer systems with gcc 6 or newer. This also fixes the doc build.
  The patch is from:
  https://sourceforge.net/p/testlilyissues/issues/4814/
  (upstream bug tracker).</changelog>
  <changelog author="davejplater@gmail.com" date="1526385600">- Fix boo#1093056 CVE-2018-10992 with Debian patch
  use_system_correctly.patch.
- Added 0101-read_relocation_dir-in-lilypond_datadir-too.patch
  hurd_file_name_support.patch
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff
  add_dircategories_to_documentation.patch
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff
  add_set-global-fonts_function.patch
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff and
  use_cstring_and_ctype_includes.patch from Debian.</changelog>
  <changelog author="davejplater@gmail.com" date="1540900800">- Removed requirement for autotrace which was needed by mftrace
  and replaced with potrace. See boo#1040278</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1557748800">- Fix build against glib2 &gt;= 2.60.2 by manually adding:
  - lglib-2.0 -lgobject-2.0 to the linker flags.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1582286400">- Work around boo#1163190 by requiring pkgconfig(cairo) for 15.2</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1587384000">- Use %license</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1588852800">- Update to version 2.20.0.
- Removed incorporated and obsolete patches:
  Avoid-segfault-in-grob.cc-with-gcc-6.patch,
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff,
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff,
  add_set-global-fonts_function.patch, hurd_file_name_support.patch,
  lilypond-doc-texinfo4.patch and  use_system_correctly.patch.
- lilypond-century-schoolbook-l-fonts replaced by
  lilypond-texgy-fonts.
- Lots of upstream new features and fixes, see:
  /usr/share/doc/packages/lilypond/NEWS.txt</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1596715200">- Add patch from git to fix boo#1174949 - CVE-2020-17353:
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1610452800">- Update to version 2.22.0 and remove incorporated patches:
  0101-read_relocation_dir-in-lilypond_datadir-too.patch and
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch
- Upstream changes:
  * Displaying pitch improvements
  * Rhythm improvements
  * Expressive mark improvements
  * Editorial annotation improvements
  * Vocal music improvements
  * Unfretted and fretted string instrument improvements
  * Chord notation improvements
  * Contemporary music improvements
  * Input file improvements
  * Output improvements</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Fix factory build by requiring t1utils for the build.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1629547200">- Update to 2.23.3
- Update dependencies:
  * Add texlive-bibtex-bin build requirement.
  * Use sil-gentium-fonts instead of gentium.
- Remove deprecated scripts in spec file.
- Refreshed patches:
  * reproducible.patch
  * add_dircategories_to_documentation.patch
  * use_cstring_and_ctype_includes.patch
- Update _constraints to let lilypond-doc build.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1633003200">- Exclude all 32 bit builds.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1676289600">- Remove linked lilypond-doc package and use one spec file</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1684324800">- Update to Factory version lilypond-2.24.1 to fix boo#1210502 -
  CVE-2020-17354: lilypond: Lilypond allows attackers to bypass
  the -dsafe protection mechanism.
- Added lilypond-missing-lgc.patch and removed obsolete
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff</changelog>
</package>
<package pkgid="b715fd1b231c00ec269bea89ef58d77dc98b766d06bc49f98b6adb3db6662427" name="lilypond-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.24.1" rel="bp154.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add netpbm BuildRequires: needed for pngtopnm.</changelog>
  <changelog author="tjcw@physics.org" date="1435752000">- Add netpbm BuildRequires in all paths, to fix build break</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Use correct vim directory
- Cleanup of the spec file
  * Install info files correctly (fixes RPMLint warnings)</changelog>
  <changelog author="bwiedemann@suse.com" date="1496318400">- Add reproducible.patch to sort input files (boo#1041090),
  to override current timestamp and to not have random uniqueIds
  to make build more reproducible</changelog>
  <changelog author="j.mairboeck@gmail.com" date="1496664000">- Add Avoid-segfault-in-grob.cc-with-gcc-6.patch to fix crash on
  newer systems with gcc 6 or newer. This also fixes the doc build.
  The patch is from:
  https://sourceforge.net/p/testlilyissues/issues/4814/
  (upstream bug tracker).</changelog>
  <changelog author="davejplater@gmail.com" date="1526385600">- Fix boo#1093056 CVE-2018-10992 with Debian patch
  use_system_correctly.patch.
- Added 0101-read_relocation_dir-in-lilypond_datadir-too.patch
  hurd_file_name_support.patch
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff
  add_dircategories_to_documentation.patch
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff
  add_set-global-fonts_function.patch
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff and
  use_cstring_and_ctype_includes.patch from Debian.</changelog>
  <changelog author="davejplater@gmail.com" date="1540900800">- Removed requirement for autotrace which was needed by mftrace
  and replaced with potrace. See boo#1040278</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1557748800">- Fix build against glib2 &gt;= 2.60.2 by manually adding:
  - lglib-2.0 -lgobject-2.0 to the linker flags.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1582286400">- Work around boo#1163190 by requiring pkgconfig(cairo) for 15.2</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1587384000">- Use %license</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1588852800">- Update to version 2.20.0.
- Removed incorporated and obsolete patches:
  Avoid-segfault-in-grob.cc-with-gcc-6.patch,
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff,
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff,
  add_set-global-fonts_function.patch, hurd_file_name_support.patch,
  lilypond-doc-texinfo4.patch and  use_system_correctly.patch.
- lilypond-century-schoolbook-l-fonts replaced by
  lilypond-texgy-fonts.
- Lots of upstream new features and fixes, see:
  /usr/share/doc/packages/lilypond/NEWS.txt</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1596715200">- Add patch from git to fix boo#1174949 - CVE-2020-17353:
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1610452800">- Update to version 2.22.0 and remove incorporated patches:
  0101-read_relocation_dir-in-lilypond_datadir-too.patch and
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch
- Upstream changes:
  * Displaying pitch improvements
  * Rhythm improvements
  * Expressive mark improvements
  * Editorial annotation improvements
  * Vocal music improvements
  * Unfretted and fretted string instrument improvements
  * Chord notation improvements
  * Contemporary music improvements
  * Input file improvements
  * Output improvements</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Fix factory build by requiring t1utils for the build.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1629547200">- Update to 2.23.3
- Update dependencies:
  * Add texlive-bibtex-bin build requirement.
  * Use sil-gentium-fonts instead of gentium.
- Remove deprecated scripts in spec file.
- Refreshed patches:
  * reproducible.patch
  * add_dircategories_to_documentation.patch
  * use_cstring_and_ctype_includes.patch
- Update _constraints to let lilypond-doc build.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1633003200">- Exclude all 32 bit builds.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1676289600">- Remove linked lilypond-doc package and use one spec file</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1684324800">- Update to Factory version lilypond-2.24.1 to fix boo#1210502 -
  CVE-2020-17354: lilypond: Lilypond allows attackers to bypass
  the -dsafe protection mechanism.
- Added lilypond-missing-lgc.patch and removed obsolete
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff</changelog>
</package>
<package pkgid="d322181db4608cda10598b6f1704bdb85568ad97cff77775564a393e70889db0" name="lilypond-debugsource" arch="s390x">
  <version epoch="0" ver="2.24.1" rel="bp154.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add netpbm BuildRequires: needed for pngtopnm.</changelog>
  <changelog author="tjcw@physics.org" date="1435752000">- Add netpbm BuildRequires in all paths, to fix build break</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Use correct vim directory
- Cleanup of the spec file
  * Install info files correctly (fixes RPMLint warnings)</changelog>
  <changelog author="bwiedemann@suse.com" date="1496318400">- Add reproducible.patch to sort input files (boo#1041090),
  to override current timestamp and to not have random uniqueIds
  to make build more reproducible</changelog>
  <changelog author="j.mairboeck@gmail.com" date="1496664000">- Add Avoid-segfault-in-grob.cc-with-gcc-6.patch to fix crash on
  newer systems with gcc 6 or newer. This also fixes the doc build.
  The patch is from:
  https://sourceforge.net/p/testlilyissues/issues/4814/
  (upstream bug tracker).</changelog>
  <changelog author="davejplater@gmail.com" date="1526385600">- Fix boo#1093056 CVE-2018-10992 with Debian patch
  use_system_correctly.patch.
- Added 0101-read_relocation_dir-in-lilypond_datadir-too.patch
  hurd_file_name_support.patch
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff
  add_dircategories_to_documentation.patch
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff
  add_set-global-fonts_function.patch
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff and
  use_cstring_and_ctype_includes.patch from Debian.</changelog>
  <changelog author="davejplater@gmail.com" date="1540900800">- Removed requirement for autotrace which was needed by mftrace
  and replaced with potrace. See boo#1040278</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1557748800">- Fix build against glib2 &gt;= 2.60.2 by manually adding:
  - lglib-2.0 -lgobject-2.0 to the linker flags.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1582286400">- Work around boo#1163190 by requiring pkgconfig(cairo) for 15.2</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1587384000">- Use %license</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1588852800">- Update to version 2.20.0.
- Removed incorporated and obsolete patches:
  Avoid-segfault-in-grob.cc-with-gcc-6.patch,
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff,
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff,
  add_set-global-fonts_function.patch, hurd_file_name_support.patch,
  lilypond-doc-texinfo4.patch and  use_system_correctly.patch.
- lilypond-century-schoolbook-l-fonts replaced by
  lilypond-texgy-fonts.
- Lots of upstream new features and fixes, see:
  /usr/share/doc/packages/lilypond/NEWS.txt</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1596715200">- Add patch from git to fix boo#1174949 - CVE-2020-17353:
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1610452800">- Update to version 2.22.0 and remove incorporated patches:
  0101-read_relocation_dir-in-lilypond_datadir-too.patch and
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch
- Upstream changes:
  * Displaying pitch improvements
  * Rhythm improvements
  * Expressive mark improvements
  * Editorial annotation improvements
  * Vocal music improvements
  * Unfretted and fretted string instrument improvements
  * Chord notation improvements
  * Contemporary music improvements
  * Input file improvements
  * Output improvements</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Fix factory build by requiring t1utils for the build.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1629547200">- Update to 2.23.3
- Update dependencies:
  * Add texlive-bibtex-bin build requirement.
  * Use sil-gentium-fonts instead of gentium.
- Remove deprecated scripts in spec file.
- Refreshed patches:
  * reproducible.patch
  * add_dircategories_to_documentation.patch
  * use_cstring_and_ctype_includes.patch
- Update _constraints to let lilypond-doc build.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1633003200">- Exclude all 32 bit builds.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1676289600">- Remove linked lilypond-doc package and use one spec file</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1684324800">- Update to Factory version lilypond-2.24.1 to fix boo#1210502 -
  CVE-2020-17354: lilypond: Lilypond allows attackers to bypass
  the -dsafe protection mechanism.
- Added lilypond-missing-lgc.patch and removed obsolete
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff</changelog>
</package>
<package pkgid="f6f0328cc74ebab309eac9ac20333ba8039da41b22703b61e7fb02ac6ebbfea5" name="lilypond-debugsource" arch="x86_64">
  <version epoch="0" ver="2.24.1" rel="bp154.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Add netpbm BuildRequires: needed for pngtopnm.</changelog>
  <changelog author="tjcw@physics.org" date="1435752000">- Add netpbm BuildRequires in all paths, to fix build break</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Use correct vim directory
- Cleanup of the spec file
  * Install info files correctly (fixes RPMLint warnings)</changelog>
  <changelog author="bwiedemann@suse.com" date="1496318400">- Add reproducible.patch to sort input files (boo#1041090),
  to override current timestamp and to not have random uniqueIds
  to make build more reproducible</changelog>
  <changelog author="j.mairboeck@gmail.com" date="1496664000">- Add Avoid-segfault-in-grob.cc-with-gcc-6.patch to fix crash on
  newer systems with gcc 6 or newer. This also fixes the doc build.
  The patch is from:
  https://sourceforge.net/p/testlilyissues/issues/4814/
  (upstream bug tracker).</changelog>
  <changelog author="davejplater@gmail.com" date="1526385600">- Fix boo#1093056 CVE-2018-10992 with Debian patch
  use_system_correctly.patch.
- Added 0101-read_relocation_dir-in-lilypond_datadir-too.patch
  hurd_file_name_support.patch
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff
  add_dircategories_to_documentation.patch
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff
  add_set-global-fonts_function.patch
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff and
  use_cstring_and_ctype_includes.patch from Debian.</changelog>
  <changelog author="davejplater@gmail.com" date="1540900800">- Removed requirement for autotrace which was needed by mftrace
  and replaced with potrace. See boo#1040278</changelog>
  <changelog author="plater &lt;davejplater@gmail.com&gt;" date="1557748800">- Fix build against glib2 &gt;= 2.60.2 by manually adding:
  - lglib-2.0 -lgobject-2.0 to the linker flags.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1582286400">- Work around boo#1163190 by requiring pkgconfig(cairo) for 15.2</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1587384000">- Use %license</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1588852800">- Update to version 2.20.0.
- Removed incorporated and obsolete patches:
  Avoid-segfault-in-grob.cc-with-gcc-6.patch,
  Issue-5243-2-Let-get-editor-use-shell-quote-argument.diff,
  Issue-5243-3-More-conservative-parsing-of-textedit-URIs.diff,
  add_set-global-fonts_function.patch, hurd_file_name_support.patch,
  lilypond-doc-texinfo4.patch and  use_system_correctly.patch.
- lilypond-century-schoolbook-l-fonts replaced by
  lilypond-texgy-fonts.
- Lots of upstream new features and fixes, see:
  /usr/share/doc/packages/lilypond/NEWS.txt</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1596715200">- Add patch from git to fix boo#1174949 - CVE-2020-17353:
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1610452800">- Update to version 2.22.0 and remove incorporated patches:
  0101-read_relocation_dir-in-lilypond_datadir-too.patch and
  0001-scm-disable-embedded-ps-and-embedded-svg-in-dsafe-mo.patch
- Upstream changes:
  * Displaying pitch improvements
  * Rhythm improvements
  * Expressive mark improvements
  * Editorial annotation improvements
  * Vocal music improvements
  * Unfretted and fretted string instrument improvements
  * Chord notation improvements
  * Contemporary music improvements
  * Input file improvements
  * Output improvements</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1613822400">- Fix factory build by requiring t1utils for the build.</changelog>
  <changelog author="Fusion Future &lt;qydwhotmail@gmail.com&gt;" date="1629547200">- Update to 2.23.3
- Update dependencies:
  * Add texlive-bibtex-bin build requirement.
  * Use sil-gentium-fonts instead of gentium.
- Remove deprecated scripts in spec file.
- Refreshed patches:
  * reproducible.patch
  * add_dircategories_to_documentation.patch
  * use_cstring_and_ctype_includes.patch
- Update _constraints to let lilypond-doc build.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1633003200">- Exclude all 32 bit builds.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1676289600">- Remove linked lilypond-doc package and use one spec file</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1684324800">- Update to Factory version lilypond-2.24.1 to fix boo#1210502 -
  CVE-2020-17354: lilypond: Lilypond allows attackers to bypass
  the -dsafe protection mechanism.
- Added lilypond-missing-lgc.patch and removed obsolete
  Issue-5243-1-editor-scm-Add-shell-quote-argument-function.diff</changelog>
</package>
<package pkgid="359028626f1927e4fa3612114e26dc350de260fcafe36ba67066fc173e937973" name="minetest-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="cd3de431988b1d1c44024059f7f3cfb5514cd68c6f9a94a68585851b2e381860" name="minetest-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="70dde3d1a0f35c2f39ef03c9f35a9b77558010245fa3373cfaa1fee51ed7c0fb" name="minetest-debuginfo" arch="s390x">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="9bbf0ae9774f126757da1d2fe7d6647b77d03fcd9c29d074b9f05fccd6376b49" name="minetest-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="a113539bc1260335bf9798c86d8567b7bc7369d9680650cbb3982527408df04e" name="minetest-debugsource" arch="aarch64">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="04a58f0e1ec6541d73e9d3acc6dcb897dbfcf52b65708c718eca8abd68ed2640" name="minetest-debugsource" arch="ppc64le">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="2e3803432f03d1530147b094bf563e1cef904d79d1f21492da8f0ad3530f3856" name="minetest-debugsource" arch="s390x">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="395a6ccf4a03e2038bfb5eb1c1a55fbac6d4e4b291da7c8faf15ab99af5e8d64" name="minetest-debugsource" arch="x86_64">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="13db42f761e521e67ab04da21509fca607388845e8ee8587b4e6db8b95cc7151" name="minetestserver-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="632024b2d31519b377be24a8b194b98aa914171a8003a5c4632463c258316970" name="minetestserver-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="31e12df39f005cb7bae118239bec115119e0d8ee6f8196fd9561be59db373cd3" name="minetestserver-debuginfo" arch="s390x">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="50dc57fb5a28d9fd224ef2fe954bc2ead64821a4ecc5ec4a2ff33d1a77f82f3e" name="minetestserver-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.6.0" rel="bp154.2.3.5"/>
  <changelog author="werner@suse.de" date="1520596800">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
  <changelog author="mvetter@suse.com" date="1551787200">- Update to 5.0.0
  * 5.0.0 is a breaking release and not compatible to the 0.4 series.
  * See changes: https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_5.0.0
- Remove shared_mods.patch: global mods possible by default now.
  See builtin/mainmenu/pkgmgr.lua
- bsc#1127911: is tracking whitelisting of `minetest` user/group
  in rpmlint</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1554120000">- bsc#1131077: BuildRequire postgresql-server-devel as a workaround
  for CMake which explicitly looks for server headers even if just
  building a client application.
  CAUTION: This workaround should not blindly be copied to other
  packages that fail to build with PostgreSQL 11. It is always
  preferrable to convert the package to use pkg-config for linking
  against libpq instead of pulling in postgresql-server-devel
  to have pg_config. If in doubt, please talk to max@suse.com
  before applying such a workaround.</changelog>
  <changelog author="mvetter@suse.com" date="1554206400">- Update to 5.0.1:
  * Fix detached inventory serialisation
  * Fix texture rotation for wallmounted nodeboxes
  * Fix build failing on some compilers
  * Warn about issues with the num_emerge_threads setting
  * HPChange Reason: Fix issues with custom reasons
  * Fix FreeBSD build by handling std::time_t properly
  * Confirm registration GUI: Remove positional strings to fix Windows bug
  * Prevent multi-line chat messages server-side
  * httpfetch: Disable IPv6 here too if requested by settings</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1570968000">- Update to 5.1.0:
  * Mapgen Carpathian: Add optional rivers (paramat)
  * Move more dungeon parameter selection to mapgens (paramat)
  * Dungeons: Make multiple large rooms possible (paramat)
  * Change pitch fly binding to 'P', add to change keys menu (rubenwardy)
  * Android settings: Use 'simple' leaves instead of 'fancy' (paramat)
  * Fix 3rd person selection range (srifqi)
  * Make scrollbars' bar variable in size (stujones11)
  * Damage: Play no damage sound when immortal (SmallJoker)
  * Increase upper limit of display_gamma to 10 (ClobberXD)
  * Optimize and unify mesh processing (Vitaliy)
  * Re-order mapgens in mainmenu and 'all settings' mapgen selection (paramat)
  * Scrollbars: Move directly to clicked pos if clicked into tray (DS-Minetest)
  * Fix broken attachments on join (SmallJoker)
  * Fix inventory_overlay for nodes without inventory_image (DS-Minetest)
  * Better F6 profiler (SmallJoker)
  * Fix minimap markers (theviper121)
  * Textures: Load base pack only as last fallback (SmallJoker)
  * Add /help formspec for commands and privileges (SmallJoker)
  * Lua API: Add link to Minetest Modding Book (ClobberXD)
  * Force item entities out of solid nodes (sfan5, based on Wuzzy`s work)
  * Lua API: Various fixes (DS-Minetest, SmallJoker)
  * Rename "private messages" to "direct messages" (Calinou)
  * Automatically enable depending mods in the dialogue (HybridDog)
  * All settings: Fix missing flags checkboxes (srifqi)
  * Various network performance improvements (osjc)
  * Force send a mapblock to a player (sofar)
  * Revert ItemStacks being limited to the 'stack_size' value (ClobberXD)
  * Save forceloaded blocks file periodically (Thomas Rudin)
  * Improve ABM time budget handling (lhofhansl)
  * Group "immortal" also protects players from damage (Wuzzy)
  * Optimize usage of TOSERVER_GOTBLOCKS packet (sfan5)
  * Network: several bugfixes (sfan5)
  * Mapgen::spreadLight performance improvement (DS-Minetest)
  * Improve occlusion culling in corridors with additional check (sfan5)
  * Inventory: Delay dirty lists, and send changes incrementally (SmallJoker)
  * Other inventory bugfixes (sfan5, SmallJoker)
  * Move debug.txt after it grows too big (HybridDog)
  * Trigger on_place in many situations even if prediction failed (DS-Minetest)
  * Punchwear (improved) (sfan5)
  * Add deprecation warnings for ObjectRef:get/set_attribute (ClobberXD)
  * Nodedef 'drop' documentation: Improve (Paramat)
  * Mark tool filtering in node drop documentation as deprecated (Paramat)
  * Add node field to PlayerHPChangeReason table (pauloue)
  * Don't call on_hpchange callbacks if HP hasn't changed (ClobberXD)
  * Add disable_jump to liquids and ladders (SmallJoker)
  * Add support for 9-sliced backgrounds (rubenwardy)
  * Add compatible, consistent coordinate system to FormSpecs (v-rob)
  * Document ObjectRef:remove under Lua entity (ClobberXD)
  * Docs: Clarify where to check for 'protection_bypass' (SmallJoker)
  * Add vector.dot and vector.cross (HybridDog)
  * Improve documentation of mapgen aliases (Paramat)
  * Remove debug.upvaluejoin to prevent leak of insecure environment (fluxionary)
  * Fix previously crashing minetest.get_craft_result() (pauloue)
  * Allow toolcaps to override the built-in times for dig_immediate (sfan5)
  * Formspec styling using style[] (rubenwardy)
  * Customizable chat message format (ClobberXD)
  * Velocity modifiers for players (sfan5)
  * Fix some issues with minetest.clear_craft (pauloue)
  * Add function `minetest.read_schematic` (paly2)
  * Formspecs: formspec_version[] element (SmallJoker)
  * Per-player FOV overrides and multipliers (ClobberXD)
  * Find PostgreSQL correctly (adrido)
  * Add compatibility to vcpkg buildsystem (adrido)
  * Android: Use system provided path for default TMPFolder setting (stujones11)
  * Fix handling of --color and --worldlist command line arguments (mmattes)
  * Unified OpenGL ES support (sfan5)</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1574424000">- Explicitly require libXxf86vm-devel.</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348800">- Update to version 5.1.1
  * See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.1.1
  * Fix player-bound sound playback (SmallJoker)
  * Fix item eat sound not played if last item (Wuzzy2)
  * Formspecs: Reset version number on rebuild (SmallJoker)
  * Rework packet receiving in ServerThread (sfan5)
  * Fix core.chat_format_message crashes (ClobberXD)
  * Fix spaces breaking formspec_version[] tag (rubenwardy)
  * Fix find_path for newer jsoncpp installations (vilhelmgray)
  * Update translations</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1579348801">- build with spatialindex-devel, this speeds up AreaStores, see
  https://github.com/minetest/minetest#cmake-options</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1586174400">- Update to version 5.2.0
- See https://dev.minetest.net/Changelog#5.1.0_.E2.86.92_5.2.0
- Client / Audiovisuals:
  * Fix alpha blending in texture modifiers (Warr1024)
  * Make natural night light as bright as MT 0.4.16 (paramat)
  * Shader fixes (lhofhansl, SmallJoker)
  * Clean up font caching, fix bitmap fonts (SmallJoker)
  * Waves generated with Perlin-type noise #8994 (lhofhansl)
  * Attachments: Fix glitches after detach (SmallJoker)
  * Let node 'place' and 'dug' sounds be heard
    by other players (sfan5)
  * Fix weird looking liquid source (Wuzzy2)
  * Basic model shading (dcbrwn)
  * Improve arm inertia animations (kilbith)
- GUI improvements:
  * Add visual feedback for button states (Df458)
  * Formspec: draw order and clipping for all elements (DS)
  * Refactor internal button styling/rendering code (Df458')
  * Formspec: Fix clicking on tooltip-obstructed elements (DS)
  * Formspec: change cursor on fields and co. (DS)
  * Various new formspec bug fixes (SmallJoker)
  * Formspec: Add 9-slice background support
    to button elements (Df458)
  * Formspec: add hypertext[] element (pyrollo)
  * Formspec: animated_image[] (Df458, kilbith)
  * Make clipping of formspec elements more consistent (Df458)
  * Remove outdated field_close_on_enter[] warnings
    in element parameters (SmallJoker)
  * Fix mouse events sent to wrong GUI elements
    when dragging (sfan5)
  * Restore intuitive click-through behaviour (DS)
- Enhancements:
  * Wear out tools on punch (sfan5)
  * Tunnels: Completely disable generation
    when 'cave width' &gt;= 10.0 (paramat)
  * Randomwalk cave liquids:
    Remove deprecated 'lava depth' (paramat)
  * Automatically enable the mod's dependencies
    in the world config menu (HybridDog)
  * Clean up craft replacements docs (pauloue)
  * Falling nodes: add missing support for light sources,
    most drawtypes, and paramtype2s (Wuzzy2)
  * Remove legacy flat-file map code
    and documentation (random-geek)
  * Fix packet receiving in server and client (sfan5)
  * Key settings: Cancel with escape,
    clear with delete (SmallJoker)
- Script API / Modding:
  * CSM: Introduce get_modpath() (sfan5)
  * CSM: Remove non-functional minetest.get_day_count() (sfan5)
  * Add z-index management to HUD (pyrollo)
  * Add table.key_value_swap and table.shuffle (HybridDog)
  * Map download:
    Escape ':' to '_' (NTFS/FAT* systems) (Montandalar)
  * Settings: Add get_flags API for mapgen flags (SmallJoker)
  * Improve minetest.sound_play with ephemeral sounds
    and player exclusion (sfan5)
  * Reworked validity checks for entities (sfan5)
  * Documentation: Add advice on lifetime of ObjectRefs (sfan5)
  * Allow texture modifiers in hotbar textures (Warr1024)
  * Nodes with torchlike drawtype and custom visual_scale now are
    rendered attached to surface instead of being centered (Wuzzy2)
  * Add documentation of VoxelArea 'ystride', 'zstride' (paramat)
  * Lua API: Document HP, breath and damage limits (SmallJoker)
  * Various documentation improvements (Wuzzy2)
  * CSM: Corrections to client_lua_api.txt (sfan5)
  * Make minetest.item_place_node return position
    of placed node (Bluebird)
  * Call on_secondary_use when object is right-clicked (sfan5)
  * CSM: Various fixes (sfan5)
  * Many pathfinder bugfixes and improvements (Wuzzy2)
    + Fix failure to find path
    if start or end pos is over air (Wuzzy2)
    + Fix very broken implementation of A* search (Wuzzy2)
    + No longer jump through solid nodes (Wuzzy2)
    + Return nil if start or end pos is solid (Wuzzy2)
  * New set_sky, set_sun, set_moon and set_stars (Jordach)
  * Secure and document minetest.deserialize() (luk3yx)
  * minetest.get_content_id: throw error
    for unknown nodes (HybridDog)
- Misc / Build:
  * Don't install fonts on ENABLE_CLIENT=0 configurations (sfan5)
  * Fix memleaks in formspecs (SmallJoker)
  * Run luacheck in travis, add luacheck (rubenwardy)
  * Various build issue fixes (Clang, Travis CI) (sfan5)</changelog>
  <changelog author="Mia Herkt &lt;mia@0x0.st&gt;" date="1592827200">- spec-cleaner
- Make sure the package does not build with bundled libraries
- Add minetest-fix-luajit-include-path.patch
  Fixes the FindLuaJIT CMake module so it also looks for the
  moonjit include path</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1594641600">- Update to version 5.3.0.
  (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
  * Formspec improvements, including a scrolling GUI element
  * Performance improvements to the Server and API
  * Many bug fixes and small features
- Now requires desktop-file-utils version &gt;= 0.25.</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1599566400">- added patch to build .desktop file without 'PrefersNonDefaultGPU'
  option on Leap 15.2 and below (old-desktopfile-standard.patch)
- removed conditional build for very old openSUSE/SLES versions
- add minetest-runtime provides</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1614168000">- Fixed build on current Factory (checking symlinks)
- Update to version 5.4.0
  * Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
  * Removed support for bumpmapping, generated normal maps
    and parallax occlusion
  * By default, the crosshair will now change to an "X" when
    pointing to objects
  * Prevent players accessing inventories of other players
  * Prevent interacting with items out of the hotbar
  * Prevent players from being able to modify ItemStack meta</changelog>
  <changelog author="Maximilian Trummer &lt;opensuse@trummer.xyz&gt;" date="1618833600">- Update to version 5.4.1:
  * This is a maintenance release based on 5.4.0,
    it contains bugfixes but no new features.
  * Apply 'old-desktopfile-standard.patch' to Leap 15.3 as well.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add GCC 11 compatibility patch:
  * 0001-Fix-build-for-newer-versions-of-GCC-11246.patch</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * minetest@.service</changelog>
  <changelog author="Simon Vogl &lt;simon.vogl@gmx.net&gt;" date="1659182400">- Drop 0001-Fix-build-for-newer-versions-of-GCC-11246.patch as it is merged upstream
- Only apply minetest-fix-luajit-include-path.patch on openSUSE Leap as TW versions do not require it any more.
- Switch to from system irrlicht to IrrlichtMt library version 1.9.0mt5
- Don't purge the bundled bitop library
- Add new libzstd build dependency
- Update to version 5.5.0 &amp; 5.5.1:
  * Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
  * This release switches from Irrlicht to our own fork called IrrlichtMt.
  * Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
  * This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.</changelog>
  <changelog author="Dmitriy Perlow &lt;dap.darkness@gmail.com&gt;" date="1660564800">- Introduced mbranch-protection=none CXX flag to resolve bnc#1193141
  (aarch64).</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1660824000">- Update to version 5.6.0
  * Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape
    sandbox in single player mode
  * `name` in game.conf is deprecated for the game title, use `title` instead
  * Add depth sorting for node faces
  * Various bug fixes
  * Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0</changelog>
</package>
<package pkgid="5933a568aecb4cf129762ad587934d54398dee94cb7fb82acf8963ce7fac1057" name="netgen-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="36bfe831ddd8a743f2bb6778863a4c5d8517861f73995191261912cb607277f2" name="netgen-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="78e23cc3685940ef6181c298fccf947dfe7beee3b682c1e5adfba95b9d908a36" name="netgen-debuginfo" arch="s390x">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="824156ce8d02ba3db3362753b146a30ec2afccc0e3baea652dc5bc4fd0b91c82" name="netgen-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="32eae26ead6250afef79d4e0337334439c81139ccef7e637fb143209d111b590" name="netgen-debugsource" arch="aarch64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="975ff8fec28ab2881c10fd2cfdd63816b68a698dab85834cf579f49610a29bdd" name="netgen-debugsource" arch="ppc64le">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="a4fd094a32e56921197d679881aa329dfd149d0155f045cff867bdbcc570e1dc" name="netgen-debugsource" arch="s390x">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="473c11dfa333a5df372a66863a32cd414af45ca9e92e14b19e785ae83a4815a3" name="netgen-debugsource" arch="x86_64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="c60e4f1bf293469850fc30a425e3e6f6de4ff0e78863975eaac7ab571254454e" name="netgen-libs-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="ba87804eaa71b4ff311950b778fa801612a3f6e470131980ebea42b221253511" name="netgen-libs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="450fd15ff6803ca1e8bea124121f12ed9661ce3a2d08397efece288e620d6e62" name="netgen-libs-debuginfo" arch="s390x">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="ba2ccafecfc0a344fe0e15646cbb33ab52b531259de1f8a6fdab0e401948937b" name="netgen-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="497af32a8243920dc40c05c56a049b270c61e75549ac813897d01aad8ed52aea" name="orthanc-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="e957ce5a614f83009372af9b4be3c4a6b948017889fd019d438c23f926352c76" name="orthanc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="54e0160cadccb0228055071577ef40597511adec24a3a1509ff0e9e3d071f008" name="orthanc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="610e44866cd6a910cedf8faa517f0af80a290af88b4cb5af0cf1056ff34b4528" name="orthanc-debugsource" arch="aarch64">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="4a9c022025126cd78179954d22ff9dabcafd0b2866618e5fc8daf0771f8808e9" name="orthanc-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="448130b739c2312c5f5f9ca93a1313d075c112c8e3945a0ef7e92873feeeba42" name="orthanc-debugsource" arch="x86_64">
  <version epoch="0" ver="1.11.2" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1598356800">- Version 1.7.3
  * API version upgraded to 8
  * "/peers/{id}/store": New option "Compress" to compress DICOM data using gzip
  * "OrthancPeerStore" jobs now report the transmitted size in their public content
  * New config option "Worklist.LimitAnswers" for the sample modality worklist plugin
  * Add missing tag "Retrieve AE Title (0008,0054)" in C-FIND SCP responses
  * Fix DICOM SCP filters if some query tag has &gt; 256 characters (list of UIDs matching)
  * "/series/.../ordered-slices" supports spaces in Image Position/Orientation Patient tags
  * Fix possible crash in HttpClient if sending multipart body (can occur in STOW-RS)
  * Support receiving multipart messages larger than 2GB in the embedded HTTP server</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1600430400">- Version 1.7.4
  * New configuration options to enable HTTP peers identification through certificates:
  "SslVerifyPeers" and "SslTrustedClientCertificates"
  * New configuration option "SyncStorageArea" to immediately commit the files onto the disk
  (through fsync()), so as to avoid discrepencies between DB and filesystem in case of hard
  shutdown of the machine running Orthanc. This slows down adding new files into Orthanc.
  * Underscores are now allowed in peers/modalities symbolic names
  * Fix compatibility with C-MOVE SCU requests issued by Ambra
  * Fix transcoding in C-MOVE SCP, in the case where "SynchronousCMove" is "true"
  * When checking DICOM allowed methods, if there are multiple modalities with the same AET,
  differentiate them from the calling IP
  * Enable the access to raw frames in Philips ELSCINT1 proprietary compression
  * Support empty key passwords when using HTTP client certificates
  * Fix handling of "ModalitiesInStudy" (0008,0061) in C-FIND and "/tools/find"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602849600">- version 1.8.0
  * Serving the content of Orthanc as a WebDAV network share
  * New config options: "WebDavEnabled", "WebDavDeleteAllowed" and "WebDavUploadAllowed"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607428800">- Version 1.8.1
  * adaption to new systemd-macros (OBS)
  * New sample tool "OrthancImport.py" to easily import compressed archives (ZIP) into Orthanc
  * Logging categories (cf. command-line options starting with "--verbose-" and "--trace=")
  * New command-line option "--trace-dicom" to access full debug information from DCMTK
  * New config option "DicomEchoChecksFind" to automatically complement C-GET SCU with C-FIND SCU
  * API version upgraded to 9
  * "/tools/dicom-echo": Execute C-Echo SCU to a modality that is not registered in "/modalities"
  * "/tools/log-level-*": Dynamically access and/or change the verbosity of logging categories
  * "/peers/{id}/configuration": Get the configuration of one peer (cf. "/peers?expand")
  * "/modalities/{id}/configuration": Get the configuration of one modality (cf. "/modalities?expand")
  * "/tools/dicom-echo" and "/modalities/{id}/echo" now accept the field "CheckFind" in their JSON
  body to complement C-GET SCU with C-FIND SCU ("DicomEchoChecksFind" on a per-connection basis)
  * Archive/media jobs report the size of the created ZIP file in content field "ArchiveSizeMB"
  * New function in the SDK: OrthancPluginGenerateRestApiAuthorizationToken()
  * C-GET SCP: Fix responses and handling of cancel
  * Fix decoding sequence if "BuiltinDecoderTranscoderOrder" is "Before"
  * Fix keep-alive in the embedded HTTP server by setting the "Keep-Alive" HTTP header
  * Fix access to videos as a single raw frame (feature broken since Orthanc 1.6.0)
  * REST API now returns 404 error if deleting an inexistent peer or modality
  * Improved forward ABI compatibility of Orthanc Framework (notably, no inline methods anymore)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.13</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608379200">- Version 1.8.2
  * ZIP archives containing DICOM files can be uploaded using WebDAV
  * New config option "MallocArenaMax" to control memory usage on GNU/Linux
  * Explicit error log if trying to load a 32bit (resp. 64bit) plugin into
  a 64bit (resp. 32bit) version of Orthanc
  * New configuration options contributed by Varian Medical Systems:
  - "DeidentifyLogs" to remove patient identification from the logs (C-GET, C-MOVE, C-FIND)
  - "DeidentifyLogsDicomVersion" to specify the deidentification rules for the logs
  - "OrthancExplorerEnabled" to enable/disable the Orthanc Explorer Web user interface
  - "SslMinimumProtocolVersion" to set the minimal SSL protocol version (now defaults to SSL 1.2)
  - "SslCiphersAccepted" to set the accepted ciphers over SSL (now defaults to FIPS 140-2)
  * New configuration options related to ingest transcoding:
  - "IngestTranscodingOfUncompressed" to control whether uncompressed transfer syntaxes are transcoded
  - "IngestTranscodingOfCompressed" to control whether compressed transfer syntaxes are transcoded
  * "/instances" can be used to import ZIP archives provided in the POST body
  * Allow concurrency on the OrthancPluginRegisterIncomingHttpRequestFilter() callbacks
  * Allow empty request body in "/modalities/{id}/echo"
  * If meta-header is missing, best-effort to extract "TransferSyntax" in "/instances/{id}/metadata"</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- Version 1.9.0
  * Support of DICOM TLS
  * New configuration options related to DICOM networking:
  - "DicomTlsEnabled" to enable DICOM TLS in Orthanc SCP
  - "DicomTlsCertificate" to provide the TLS certificate to be used in both Orthanc SCU and SCP
  - "DicomTlsPrivateKey" to provide the private key of the TLS certificate
  - "DicomTlsTrustedCertificates" to provide the list of TLS certificates to be trusted by Orthanc
  - "UseDicomTls" in "DicomModalities" to enable DICOM TLS in outgoing SCU on a per-modality basis
  - "MaximumPduLength" to tune the maximum PDU length (Protocol Data Unit)
  - "LocalAet" in "DicomModalities" to overwrite global "DicomAet" for SCU on a per-modality basis
  - "AcceptedTransferSyntaxes" to set the transfer syntax UIDs accepted by Orthanc C-STORE SCP
  - "H265TransferSyntaxAccepted" to enable/disable all the transfer syntaxes related to H.265
  - "DicomAlwaysAllowFind" to disable verification of the remote modality in C-FIND SCP
  - "DicomAlwaysAllowGet" to disable verification of the remote modality in C-GET SCP
  * New configuration option: "DicomScuPreferredTransferSyntax" to control transcoding in C-STORE SCU
  * New command-line option: "--openapi" to write the OpenAPI documentation of the REST API to a file
  * New metadata automatically computed at the series level: "RemoteAET"
  * The DICOM meta-header and the transfer syntax are displayed at the "Instance" level
  * API version upgraded to 10
  * "/tools/accepted-transfer-syntaxes": Get/set transfer syntaxes accepted by Orthanc C-STORE SCP
  * "/tools/unknown-sop-class-accepted": Get/set whether C-STORE SCP accepts unknown SOP class UID
  * "/modalities/{...}/query": New string argument "LocalAet"
  * "/tools/create-dicom": New flag "Force" to bypass consistency checks for the DICOM tags
  * BREAKING CHANGE: All the Lua callbacks "IsXXXTransferSyntaxAccepted()" and
  "IsUnknownSopClassAccepted()" have been removed
  * New functions in the SDK:
  - OrthancPluginCreateMemoryBuffer64()
  - OrthancPluginRegisterStorageArea2()
  - OrthancPluginCreateDicom2()
  * Refactoring and improvements to the cache of DICOM files (it can now hold many files)
  * New Prometheus metrics "orthanc_dicom_cache_count" and "orthanc_dicom_cache_size"
  * Fix upload of multiple DICOM files using one single POST call to "multipart/form-data"
  Could be the final resolution of issue #21 (DICOM files missing after uploading with Firefox)
  * Partial fix of issue #48 (Windows service not stopped properly), cf. comments 4 and 5
  * Explicitly use little-endian to encode uncompressed file size with zlib compression
  * Upgraded dependencies for static builds (notably on Windows):
  - dcmtk 3.6.6
  - jsoncpp 1.9.4</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1614254400">- version 1.9.1
  * The "dicom-as-json" attachments are not explicitly stored anymore to improve performance
  * If the storage area doesn't support range reading, or if "StorageCompression"
  is enabled, a new type of attachment "dicom-until-pixel-data" is generated
  * New metadata automatically computed at the instance level: "PixelDataOffset"
  * New configuration option related to networking:
  - "Timeout" in "DicomModalities" to set DICOM SCU timeout on a per-modality basis
  - "Timeout" in "OrthancPeers" to set HTTP client timeout on a per-peer basis
  * API version upgraded to 11
  * BREAKING CHANGES:
  - External applications should not call "/instances/.../attachments/dicom-as-json" anymore,
    and should use "/instances/.../tags" instead
  - "/instances/.../tags" route does not report the tags after "Pixel Data" (7fe0,0010) anymore
  * "/peers/{id}/store-straight": Synchronously send the DICOM instance in POST body to the peer
  * New arguments in the REST API:
  - "Timeout" in "/modalities/.../query"
  - "Timeout" in "/modalities/.../storage-commitment"
  - "Timeout" in "/queries/.../answers/.../query-{studies|series|instances}"
  * New value in enumeration: OrthancPluginDicomToJsonFlags_StopAfterPixelData
  * New value in enumeration: OrthancPluginDicomToJsonFlags_SkipGroupLengths
  * Improved precision of floating-point numbers in DICOM-as-JSON and DICOM summary
  * Optimization in C-STORE SCP by avoiding an unnecessary DICOM parsing
  * Fix build on big-endian architectures
  * Handle public tags with "UN" value representation and containing a string (cf. DICOM CP 246)
  * The numbering of sequences in Orthanc Explorer now uses the DICOM convention (starts at 1)
  * Possibility to generate a static library containing the Orthanc Framework</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1620561600">- Version 1.9.3
  * New configuration option: "DicomTlsRemoteCertificateRequired" to allow secure DICOM TLS
  connections without certificate
  * "ETag" headers for metadata and attachments now allow strong comparison (MD5 is included)
  * New CMake option: "ORTHANC_LUA_VERSION" to use a specific version of system-wide Lua
  * Fix the lifetime of temporary files associated with jobs that create ZIP archive/media:
  - In synchronous mode, their number could grow up to "JobsHistorySize" in Orthanc &lt;= 1.9.2
  - In asynchronous mode, the temporary files are removed as soon as their job gets canceled
  * Fix regression in the handling of "DicomCheckModalityHost" configuration option
  introduced by changeset 4182 in Orthanc 1.7.4
  * Reduced memory consumption of "OrthancPluginHttpClient()", "OrthancPluginHttpClient2()" and
  "OrthancPluginCallPeerApi()" on POST/PUT if chunked transfer is disabled
  * Fix issue #195 (No need for BulkDataURI when Data Element is empty)
- from version 1.9.2:
  * New configuration options related to multiple readers/writers:
  - "DatabaseServerIdentifier" identifies the server in the DB among a pool of Orthanc servers
  - "CheckRevisions" to protect against concurrent modifications of metadata and attachments
  * API version upgraded to 12
  * "/system" reports the value of the "CheckRevisions" global option
  * "/.../{id}/metadata/{name}" and "/.../{id}/attachments/{name}/..." URIs handle the
  HTTP headers "If-Match", "If-None-Match" and "ETag" to cope with revisions
  * New function in the SDK: OrthancPluginCallRestApi()
  * Full refactoring of the database plugin SDK to handle multiple readers/writers,
  which notably implies the handling of retries in the case of collisions
  * Use the local timezone for query/retrieve in the Orthanc Explorer interface (was UTC before)
  * Fix "OrthancServer/Resources/Samples/Python/Replicate.py" for Python 3.x
  * Fix issue #83 (ServerIndex shall implement retries for DB temporary errors)
  * Upgraded dependencies for static builds (notably on Windows and LSB):
  - civetweb 1.14
  - openssl 1.1.1k</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624536000">- version 1.9.4
  * Orthanc now anonymizes according to Basic Profile of PS 3.15-2021b Table E.1-1
  * New configuration options:
  - "ExternalDictionaries" to load external DICOM dictionaries (useful for DICONDE)
  - "SynchronousZipStream" to disable streaming of ZIP
  * Orthanc Explorer supports the DICONDE dictionary
  * API version upgraded to 13
  * New routes to handle groups of multiple, unrelated DICOM resources at once:
  - "/tools/bulk-anonymize" to anonymize a set of resources
  - "/tools/bulk-content" to get the content of a set of resources
  - "/tools/bulk-delete" to delete a set of resources
  - "/tools/bulk-modify" to modify a set of resources
  * ZIP archive/media generated in synchronous mode are now streamed by default
  * "Replace" tags in "/modify" and "/anonymize" now supports value representation AT
  * "/jobs/..." has new field "ErrorDetails" to help identify the cause of an error
  * "Replace", "Keep" and "Remove" in "/modify" and "/anonymize" accept paths to subsequences
  using the syntax of the dcmodify command-line tool (wildcards are supported as well)
  * Added "short", "simplify" and/or "full" options to control the format of DICOM tags in:
  - GET /patients, GET /studies, GET /series, GET /instances (together with "&amp;expand")
  - GET /patients/{id}, GET /studies/{id}, GET /series/{id}, GET /instances/{id}
  - GET /patients/{id}/studies, GET /patients/{id}/series, GET /patients/{id}/instances
  - GET /studies/{id}/patient, GET /studies/{id}/series, GET /studies/{id}/instances
  - GET /series/{id}/patient, GET /series/{id}/study, GET /series/{id}/instances
  - GET /instances/{id}/patient, GET /instances/{id}/study, GET /instances/{id}/series
  - GET /patients/{id}/instances-tags, GET /patients/{id}/shared-tags
  - GET /studies/{id}/instances-tags, GET /series/{id}/shared-tags
  - GET /series/{id}/instances-tags, GET /studies/{id}/shared-tags
  - GET /patients/{id}/module, GET /patients/{id}/patient-module
  - GET /series/{id}/module, GET /studies/{id}/module, GET /instances/{id}/module
  - POST /tools/find
  * "/studies/{id}/split" accepts "Instances" parameter to split instances instead of series
  * "/studies/{id}/merge" accepts instances inside its "Resources" parameter
  * Full support of hierarchical relationships in tags whose VR is UI during anonymization
  * C-MOVE SCP: added possible DIMSE status "Sub-operations Complete - One or more Failures"
  * Fix issue #146 (Update Anonyization to 2019c) - was actually updated to 2021b
  * Upgraded dependencies for static builds (notably on Windows):
  - curl 7.77.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626004800">- version 1.9.5
  * Anonymization is applied recursively to nested tags
  * API version upgraded to 14
  * Added "Short", "Simplify" and/or "Full" options to control the format of DICOM tags in:
  - POST /modalities/{id}/find-worklist
  - POST /queries/{id}/answers/{index}/retrieve
  - POST /queries/{id}/retrieve
  * Fix broken "Do lookup" button in Orthanc Explorer
  * Error code and description of jobs are now saved into the Orthanc database</changelog>
  <changelog author="Steve Kowalik &lt;steven.kowalik@suse.com&gt;" date="1626696000">- Remove executable bits from Python scripts when creating the source
  tree for the -source package to stop it requiring /usr/bin/python</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.9.6
  * In lookup and query/retrieve, possibility to provide a specific study date
  * Clicking on "Send to remote modality" displays the job information to monitor progress
  * Fix orphaned attachments if bad revision number is provided</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1630497600">- Version 1.9.7
  * New configuration option "DicomAlwaysAllowMove" to disable verification of
  the remote modality in C-MOVE SCP
  * API version upgraded to 15
  * Added "Level" option to POST /tools/bulk-modify
  * Added missing OpenAPI documentation of "KeepSource" in ".../modify" and ".../anonymize"
  * Added file CITATION.cff
  * Linux Standard Base (LSB) builds of Orthanc can load non-LSB builds of plugins
  * Fix upload of ZIP archives containing a DICOMDIR file
  * Fix computation of the estimated time of arrival in jobs
  * Support detection of windowing and rescale in Philips multiframe images</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1632657600">- Test for SharedLibrary.Basic disabled (fails with new glibc)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * orthanc.service</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 1.10.1
  * for detailed changelog see NEWS</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1651838400">- switched source urls to https</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1652184000">- version 1.11.0
  * new API version 1.7
  * new configuration parameter
  * for detailed changelog see NEWS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 1.11.2
  * Added support for RGBA64 images in tools/create-dicom and /preview
  * New configuration "MaximumStorageMode" to choose between recyling of
    old patients (default behavior) and rejection of new incoming data when
    the MaximumStorageSize has been reached.
  * New sample plugin: "DelayedDeletion" that will delete files from disk
    asynchronously to speed up deletion of large studies.
  * Lua: new "SetHttpTimeout" function
  * Lua: new "OnHeartBeat" callback called at regular interval provided that
    you have configured "LuaHeartBeatPeriod" &gt; 0.
  * "ExtraMainDicomTags" configuration now accepts Dicom Sequences.  Sequences are
    stored in a dedicated new metadata "MainDicomSequences".  This should improve
    DicomWeb QIDO-RS and avoid warnings like "Accessing Dicom tags from storage when
    accessing series : 0040,0275".
    Main dicom sequences can now be returned in "MainDicomTags" and in "RequestedTags".
  * Fix the "Never" option of the "StorageAccessOnFind" that was sill accessing
    files (bug introduced in 1.11.0).
  * Fix the Storage Cache for compressed files (bug introduced in 1.11.1).
  * Fix the storage cache that was not used by the Plugin SDK.  This fixes the
    DicomWeb plugin "/rendered" route performance issues.
  * DelayedDeletion plugin: Fix leaking of symbols
  * SQLite now closes and deletes WAL and SHM files on exit.  This should improve
    handling of SQLite DB over network drives.
  * Fix static compilation of boost 1.69 on Ubuntu 22.04
  * Upgraded dependencies for static builds:
  - boost 1.80.0
  - dcmtk 3.6.7  (fixes CVE-2022-2119 and CVE-2022-2120)
  - openssl 3.0.5
  * Housekeeper plugin: Fix resume of previous processing
  * Added missing MOVEPatientRootQueryRetrieveInformationModel in
    DicomControlUserConnection::SetupPresentationContexts()
  * Improved HttpClient error logging (add method + url)
  * API version upgraded to 18
  * /system is now reporting "DatabaseServerIdentifier"
  * Added an Asynchronous mode to /modalities/../move.
  * "RequestedTags" option can now include DICOM sequences.
  * New function in the SDK: "OrthancPluginGetDatabaseServerIdentifier"
  * DicomMap::ParseMainDicomTags has been deprecated -&gt; retrieve "full" tags
    and use DicomMap::FromDicomAsJson instead</changelog>
</package>
<package pkgid="ec4d2fe440ab85304c9d1c13897edfd056e1bd5b7ee5e8769a43cbe37c71b0d4" name="orthanc-gdcm-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="3e8928e7fc24f01134d10c0fbe4326d372bcc1550b6ccfe13d9cb67a8e072057" name="orthanc-gdcm-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="a64ef191081d7c0031309635e61bea20e4de3751b468caf382b517eb53cad7d9" name="orthanc-gdcm-debuginfo" arch="s390x">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="f2fa94b9d04d586dafeba990d892b5c2d90a595951f09b50e4d988daddde851c" name="orthanc-gdcm-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="2273d8c1747fd0c112db53ec11e135e1e36afbad190e3e1f66962b1190f4c9d8" name="orthanc-gdcm-debugsource" arch="aarch64">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="f9dd3a26cc94279ae5bd3b36fb9e207205f7a5a2501c3207ff273c213d5d4191" name="orthanc-gdcm-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="4cb8fe4fc8fc912ebe2e09a9f4130ba8e3c93ede92dc272e3edb19935c1b8ff8" name="orthanc-gdcm-debugsource" arch="s390x">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="dec6a2d5fa90c7dfd10bf147bb104c33be3ea49e030bef1ec56f9daa01b8a172" name="orthanc-gdcm-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590494400">- version 1.0 of the plugin
  iniital build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 1.1
  * Fix transcoding of DICOM files encoded using an implicit transfer syntax
  * Support of dynamic linking against the system-wide Orthanc framework
    library
  * Upgrade to GDCM 3.0.7 for static builds</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1607601600">- patches_logging.patch added to fix build error w. orthanc 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608552000">- Version 1.2
  * Temporarily prevent transcoding of 16bpp images to JPEG, as this might crash GDCM
  * Upgrade to GDCM 3.0.8 for static builds
  * patches_logging.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1609329600">- Workaround for boo#1180359</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1624104000">- version 1.3
  * Prevent changing SOP class UID from "MR Image Storage" to "Enhanced
  MR Image Storage" during the transcoding</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1626955200">- version 1.4
  * Prevent transcoding of 1bpp DICOM images, as this might crash GDCM</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- Version 1.5
  * Take the configuration option "RestrictTransferSyntaxes" into
  account not only for decoding, but also for transcoding
  * Upgrade to GDCM 3.0.10 for static builds-</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- changed dependency gdcm-libgdcm3_0 -&gt; libgdcm3_0</changelog>
</package>
<package pkgid="3f32177b0c2b150805d847eaa920665f082642ae6842db25dd2260936fee622e" name="orthanc-webviewer-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="7a66b8d7bc244f09e059a80970652f27b3ccc2fd50928e039f67076487fcaf85" name="orthanc-webviewer-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="e6d5eee8787328f591050d7f3730e3299248088eb426ab796f6b549affdce737" name="orthanc-webviewer-debuginfo" arch="s390x">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="67c0d9b6ab4e0c6e9af518ffbd603dfa140e0a822eebc295ef5fa67ac508b399" name="orthanc-webviewer-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="287c082702acf06c1283d11ec2ca4d49ff54659a570491c5cb837a2f449a7e67" name="orthanc-webviewer-debugsource" arch="aarch64">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="cea57e4815c55a863ab8840f14b220033b8f1c6823849fc5d682a3da90bcc54d" name="orthanc-webviewer-debugsource" arch="ppc64le">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="352263f0f14b0622fa7b8ea30396bf3bcd34d6537bddab37e9fc2d97e0751150" name="orthanc-webviewer-debugsource" arch="s390x">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="c161fb2facc49d70d7787a95bd2c47c595b2fee49a0907b9e2822baad089ffc5" name="orthanc-webviewer-debugsource" arch="x86_64">
  <version epoch="0" ver="2.8" rel="bp154.2.3.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1573214400">- version 2.5
  Initial build on OBS</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1574942400">- cachmngr.diff fixes missing include</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1587297600">- webjierwer.json &amp; README adapted</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1590580800">- version 2.6
  * cachemngr.diff removed
  * DecodedImageAdapter.cpp removed
  * Move the GDCM decoder out of the Orthanc Web viewer plugin as a
  separate plugin: https://book.orthanc-server.com/plugins/gdcm.html
  * Performance: Replaced "OrthancPluginRegisterRestCallback" by
  "OrthancPluginRegisterRestCallbackNoLock"
  * Authorization tokens passed as url search params in Orthanc Explorer
  are now transmitted to the viewer and included as headers in every
  HTTP request to the Rest API easing the usage of the Authorization
  plugin
  * Upgrade to Orthanc framework to 1.7.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1603368000">- switched to orthanc-framework (static orthanc version)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1608033600">- Version 2.7
  * Support of dynamic linking against the system-wide Orthanc framework library
  * Upgrade to Orthanc framework 1.8.1</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1611921600">- framework190.diff added for compatibility with framework 1.9.0</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664280000">- version 2.8
  * Fix XSS inside DICOM in Orthanc Web Viewer (as reported by Stuart
    Kurutac, NCC Group)
  * framework190.diff removed (covered in actual version)</changelog>
</package>
<package pkgid="fa381c490cfb151dbe2c7efd2798923b0f1467ad7e75f70a4c53caa6b59746d0" name="pdns-recursor-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.6.3" rel="bp154.2.3.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1599566400">- update to 4.3.4
  * fixes an issue where certain CNAMEs could lead to resolver failure
  * fixes an issue with the hostname reported in Carbon messages
  * allows for multiple recursor services to run under systemd
- use HTTPS scheme for all URLs</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer?s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
</package>
<package pkgid="965c657aa0f824635b057936da789b604fa2aef38065da5acac06bc24d2e5d00" name="pdns-recursor-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.6.3" rel="bp154.2.3.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1599566400">- update to 4.3.4
  * fixes an issue where certain CNAMEs could lead to resolver failure
  * fixes an issue with the hostname reported in Carbon messages
  * allows for multiple recursor services to run under systemd
- use HTTPS scheme for all URLs</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer?s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
</package>
<package pkgid="c5132b790cfa832b9371fbb3cab514573f2ef175272afc357e62f928c386c5a7" name="pdns-recursor-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.3" rel="bp154.2.3.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1599566400">- update to 4.3.4
  * fixes an issue where certain CNAMEs could lead to resolver failure
  * fixes an issue with the hostname reported in Carbon messages
  * allows for multiple recursor services to run under systemd
- use HTTPS scheme for all URLs</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer?s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
</package>
<package pkgid="9ae27eaa8189c5247b3ced3c94d4abe9a12fa6a01ee7fcabc7eff7bc3f410657" name="pdns-recursor-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.6.6" rel="bp154.2.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer’s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 4.6.6" date="1680609600">- update to 4.6.6
  * fixes deterred spoofing attempts can lead to authoritative
  servers being marked unavailable (bsc#1209897, CVE-2023-26437)
- fixes in 4.6.5
  * When an expired NSEC3 entry is seen, move it to the front
    of the expiry queue
  * Log invalid RPZ content when obtained via IXFR
  * Detect invalid bytes in makeBytesFromHex()
  * Timeout handling for IXFRs as a client
- fixes in 4.6.4
  * check qperq limit if throttling happened, as it increases counters
  * Failure to retrieve DNSKEYs of an Insecure zone should not be fatal
  * Resize answer length to actual received length in udpQueryResponse</changelog>
</package>
<package pkgid="cd0904cf0422e4f307dc3bd14a8eb20363d466e4b5715db0500862d1cedff803" name="pdns-recursor-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.6.6" rel="bp154.2.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer’s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 4.6.6" date="1680609600">- update to 4.6.6
  * fixes deterred spoofing attempts can lead to authoritative
  servers being marked unavailable (bsc#1209897, CVE-2023-26437)
- fixes in 4.6.5
  * When an expired NSEC3 entry is seen, move it to the front
    of the expiry queue
  * Log invalid RPZ content when obtained via IXFR
  * Detect invalid bytes in makeBytesFromHex()
  * Timeout handling for IXFRs as a client
- fixes in 4.6.4
  * check qperq limit if throttling happened, as it increases counters
  * Failure to retrieve DNSKEYs of an Insecure zone should not be fatal
  * Resize answer length to actual received length in udpQueryResponse</changelog>
</package>
<package pkgid="509ec6cf4ce57a13c075fd898ecab8263dc02e77eb1f6dd50561e9685a81d6a7" name="pdns-recursor-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.6" rel="bp154.2.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer’s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 4.6.6" date="1680609600">- update to 4.6.6
  * fixes deterred spoofing attempts can lead to authoritative
  servers being marked unavailable (bsc#1209897, CVE-2023-26437)
- fixes in 4.6.5
  * When an expired NSEC3 entry is seen, move it to the front
    of the expiry queue
  * Log invalid RPZ content when obtained via IXFR
  * Detect invalid bytes in makeBytesFromHex()
  * Timeout handling for IXFRs as a client
- fixes in 4.6.4
  * check qperq limit if throttling happened, as it increases counters
  * Failure to retrieve DNSKEYs of an Insecure zone should not be fatal
  * Resize answer length to actual received length in udpQueryResponse</changelog>
</package>
<package pkgid="dfb1b270299ba94c57177f353006ea56e71f224b9a20de37d645f9e93ef395b9" name="pdns-recursor-debugsource" arch="aarch64">
  <version epoch="0" ver="4.6.3" rel="bp154.2.3.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1599566400">- update to 4.3.4
  * fixes an issue where certain CNAMEs could lead to resolver failure
  * fixes an issue with the hostname reported in Carbon messages
  * allows for multiple recursor services to run under systemd
- use HTTPS scheme for all URLs</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer?s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
</package>
<package pkgid="6538671456ddfae5c6bc5bc02c8475fab048a4a4c5b49589a43b3235eadc5b5f" name="pdns-recursor-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.6.3" rel="bp154.2.3.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1599566400">- update to 4.3.4
  * fixes an issue where certain CNAMEs could lead to resolver failure
  * fixes an issue with the hostname reported in Carbon messages
  * allows for multiple recursor services to run under systemd
- use HTTPS scheme for all URLs</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer?s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
</package>
<package pkgid="a31d9cfdc047d8a780a8e2c2fc6a89bebde0699edb1596c2eef5c3db7caebbf2" name="pdns-recursor-debugsource" arch="x86_64">
  <version epoch="0" ver="4.6.3" rel="bp154.2.3.1"/>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1599566400">- update to 4.3.4
  * fixes an issue where certain CNAMEs could lead to resolver failure
  * fixes an issue with the hostname reported in Carbon messages
  * allows for multiple recursor services to run under systemd
- use HTTPS scheme for all URLs</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer?s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
</package>
<package pkgid="2b89f6eaad59e81fafa32a1ac41aa6b421239ab0a0a9bf6e7c543adb1335a983" name="pdns-recursor-debugsource" arch="aarch64">
  <version epoch="0" ver="4.6.6" rel="bp154.2.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer’s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 4.6.6" date="1680609600">- update to 4.6.6
  * fixes deterred spoofing attempts can lead to authoritative
  servers being marked unavailable (bsc#1209897, CVE-2023-26437)
- fixes in 4.6.5
  * When an expired NSEC3 entry is seen, move it to the front
    of the expiry queue
  * Log invalid RPZ content when obtained via IXFR
  * Detect invalid bytes in makeBytesFromHex()
  * Timeout handling for IXFRs as a client
- fixes in 4.6.4
  * check qperq limit if throttling happened, as it increases counters
  * Failure to retrieve DNSKEYs of an Insecure zone should not be fatal
  * Resize answer length to actual received length in udpQueryResponse</changelog>
</package>
<package pkgid="5453e39fe32a9a6ef1140747dd662f0af501c8e60fcd898d11f318962d199896" name="pdns-recursor-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.6.6" rel="bp154.2.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer’s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 4.6.6" date="1680609600">- update to 4.6.6
  * fixes deterred spoofing attempts can lead to authoritative
  servers being marked unavailable (bsc#1209897, CVE-2023-26437)
- fixes in 4.6.5
  * When an expired NSEC3 entry is seen, move it to the front
    of the expiry queue
  * Log invalid RPZ content when obtained via IXFR
  * Detect invalid bytes in makeBytesFromHex()
  * Timeout handling for IXFRs as a client
- fixes in 4.6.4
  * check qperq limit if throttling happened, as it increases counters
  * Failure to retrieve DNSKEYs of an Insecure zone should not be fatal
  * Resize answer length to actual received length in udpQueryResponse</changelog>
</package>
<package pkgid="7e03d49dc25d2d4db58fa4e41f45d7cab1c14d690e973cc476623fabb7b7113d" name="pdns-recursor-debugsource" arch="x86_64">
  <version epoch="0" ver="4.6.6" rel="bp154.2.6.1"/>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1599652800">- 9070.patch: backport compilation fix vs. latest Boost 1.74
  based on https://github.com/PowerDNS/pdns/pull/9070</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1602590400">- update to 4.3.5:
  * fixes cache pollution related to DNSSEC validation.
    (CVE-2020-25829, bsc#1177383)
  * now raise an exception on invalid content in unknown records
  * fixes the parsing of dont-throttle-netmasks in the presence of
    dont-throttle-names
- 9070.patch: refreshed, looks like only partially upstreamed</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1603108800">- update to 4.4.0 with these major enhancements:
  * Native DNS64 support, without the need to use Lua.
  * The ability to add custom tags to RPZ hits.
  * Names encountered while resolving CNAMEs are now subject to RPZ
    processing.
  * More detailed information about RPZ handling is now available while
    tracing, in Lua and in the protobuf logging messages.
  * To allow more efficient use, the record cache is now shared between
    threads.
  * A routing tag[3] can be added in Lua code, which will be used as an
    additional record cache key instead of an EDNS subnet mask,
    enabling for a simpler record cache structure which will enhance
    query processing where the EDNS subnet mask is relevant.
  * The Proxy Protocol version 2 has been implemented to allow for a
    structured exchange of information between a client (typically
    dnsdist) and the Recursor.
- removed obsolete back-port fix 9070.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603713600">- fix default config
  - turn off chroot by default as it is not supported on systemd
    enabled systems
  - set query-local-address to ::,0.0.0.0
    to make ipv6 only nameservers work out of the box</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1606132800">- Only require 'insserv' when this package ships an initscript</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1606305600">- update to 4.4.1
  * Allow specifying a name in getMetric() that is used for Prometheus
  * Avoids a CNAME loop detection issue with DNS64
  * No longer sends overly long NOD lookups.
  * If a.b.c CNAME x.a.b.c is encountered, switch off QName Minimization.
  * Fix the processing of answers generated from gettag.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1607947200">- update to 4.4.2:
  Improvements
  * UUID: Use the non-cryptographic variant of the boost::uuid.
  * Keep a cached, valid entry over a fresher Bogus one.
  * Ensure socket-dir matches runtime directory on old systemd
  * Move to several distinct Bogus states, for easier debugging.
  * Do not chase CNAME during qname minimization step 4.
  Bug Fixes
  * Untangle the validation/resolving qnames and qtypes.
  * APL records: fix endianness problem.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.2</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1617192000">- update to 4.4.3:
  Improvements
    Use a short-lived NSEC3 hashes cache for denial validation.
    References: #9856, pull request 10221
  Bug Fixes
    More fail-safe handling of Newly Discovered Domain files.
    Handle policy (if needed) after postresolve.
    Return current rcode instead of 0 if there are no CNAME records to follow.
    Lookup DS entries before CNAME entries.
    Handle failure to start the web server more gracefully.
    Test that we correctly cap the answer’s TTL in expanded wildcard cases.
    Fix the gathering of denial proof for wildcard-expanded answers.
    Make sure we take the right minimum for the packet cache TTL data in the SERVFAIL case.
  For details see,
  https://doc.powerdns.com/recursor/changelog/4.4.html#change-4.4.3</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1620734400">- update to 4.5.1:
- Main changes:
  * Dropped support for 32-bit platforms!
  * Rewrite of the way zone cuts are determined, reducing the number of
    outgoing queries by up to 17% when doing DNSSEC validation while reducing
    the CPU usage more than 20% .
  * Added implementation of EDNS0 padding (RFC 7830) for answers sent to clients.
  * Added implementation of RFC 8198[2]: Aggressive use of DNSSEC-Validated Cache.
  * Added a cache of non-resolving nameservers.
  * Re-worked negative cache that is shared between threads.
  * Added support for Extended DNS Errors (RFC 8914[5]).
  * A "refresh almost expired records" (also called "refetch") mechanism[8]
    has been introduced to keep the record cache warm.
- Other new features and improvements:
  * The complete protobuf and dnstap logging code has been rewritten to
    have much smaller performance impact.
  * We have introduced non-offensive synonyms for words used in
    settings. See the upgrade[9] guide.
  * The default minimum TTL[10] override has been changed from 0 to 1.
  * The spoof-nearmiss-max setting[11]'s default has been changed to 1.
    This has the consequence that the Recursor will switch to do TCP
    queries to authoritative nameservers sooner as an effective measure
    against many spoofing attacks.
  * Incoming queries over TCP now also use the packet cache, providing
    another performance increase.
  * File written to by the rec_control command are new opened by the
    command itself. It is also possible to write the content to the
    standard output stream by using a hyphen as file name.
  * TCP FastOpen (RFC 7413[12]) support for outgoing TCP connections to
    authoritative servers and forwarders.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1623240000">- update to 4.5.2:
  * default value of nsec3-max-iterations[1] has been lowered to 150
  * fixed issue affecting the "refresh almost expired" function</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1624622400">- no longer supports 32-bit arches -- requiers 64-bit time_t
- specfile cleanup - drop initrd cases
- build-require gcc7 on SLE-12 variant</changelog>
  <changelog author="Wolfgang Rosenauer &lt;wr@rosenauer.org&gt;" date="1625486400">- update to 4.5.4:
  * Make sure that we pass the SOA along the NSEC(3) proof for
    DS queries.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1627646400">- update to 4.5.5:
  * Improvements
  - Work around clueless servers sending AA=0 answers.
    References: #10555, pull request 10564
  * Bug Fixes
  - Ancestor NSEC3s can only deny the existence of a DS.
    References: #10587, pull request 10593
  - Make really sure we did not miss a cut on validation failure.
    References: #10570, pull request 10575
  - Clear the current proxy protocol values each iteration.
    References: #10515, pull request 10573</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1633953600">- update to 4.5.6:
  * Bug Fixes
  - fixes to the way RPZ updates are handled
  - fix to a case where traffic to a forwarder could be throttled while it should not.
  - fixed few minor DNSSEC validation issues
  - fix for case where the combining of equivalent queries wasn't
    effective were resolved</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1636113600">- update to 4.5.7:
  * A SHA-384 DS should not trump a SHA-256 one, only potentially ignore SHA-1 DS records.
    References: #10908, pull request 10912
  * rec_control wipe-cache-typed should check if a qtype arg is present and valid.
    References: #10905, pull request 10911
  * Put the correct string into appliedPolicyTrigger for Netmask matching rules.
    References: #10842, pull request 10863</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1639742400">- update to 4.6.0
  Compared to the previous major (4.5) release of PowerDNS Recursor, this
  release contains several sets of changes:
  * The ability to flush records from the caches on a incoming
    notify requests.
  * A rewrite of the outgoing TCP code, adding both re-use of
    connections and support for DoT to authoritative servers or
    forwarders.
  * Many improvements in the area of metrics: more metrics are
    collected and more metrics are now exported in a Prometheus
    friendly way.
  * A new Zone to Cache function that will retrieve a zone (using
    AXFR, HTTP, HTTPS or a local file) periodically and insert the
    contents into the record cache, allowing the cache to be always hot
    for a zone. This can be used for the root or any other zone.
  * An experimental Event Tracing function, providing insight into
    the time taken by the steps in the process of resolving a name.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648209600">- update to 4.6.1
  fixes incomplete validation of incoming IXFR transfer in
  the Recursor. It applies to setups retrieving one or more RPZ
  zones from a remote server if the network path to the server
  is not trusted. (bsc#1197525, CVE-2022-27227)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1648468800">- fix building against sle-12 backports with gcc-9
- remove obsolete BR on protobuf
- add bundled information to the spec file
- boost_context.patch: Boost.Context detection fix on SLE12</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1661342400">- update to 4.6.3
  * fixes incomplete exception handling related to protobuf message generation
  (bsc#1202664, CVE-2022-37428)
- fixes in 4.6.2
  * Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  * A CNAME answer on DS query should abort DS retrieval
  * Allow disabling of processing the root hints
  * If we get NODATA on an AAAA in followCNAMERecords, try native dns64</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt; - 4.6.6" date="1680609600">- update to 4.6.6
  * fixes deterred spoofing attempts can lead to authoritative
  servers being marked unavailable (bsc#1209897, CVE-2023-26437)
- fixes in 4.6.5
  * When an expired NSEC3 entry is seen, move it to the front
    of the expiry queue
  * Log invalid RPZ content when obtained via IXFR
  * Detect invalid bytes in makeBytesFromHex()
  * Timeout handling for IXFRs as a client
- fixes in 4.6.4
  * check qperq limit if throttling happened, as it increases counters
  * Failure to retrieve DNSKEYs of an Insecure zone should not be fatal
  * Resize answer length to actual received length in udpQueryResponse</changelog>
</package>
<package pkgid="946f3551c7fc8a4233561e72e113e5510a0959a5cef6a3398ad85ce6bf452aeb" name="plasma5-workspace-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="5987bbc9b17a3b0c4f3436f5e3db72968d81fc670cb0174b7653fb65a822801d" name="plasma5-workspace-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="84ea999cd8e6f00dec0b70274b6df328b657455ae840c2ecf67f645efe729160" name="plasma5-workspace-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="2c5d6c80c695f0e7383a094d933dce64bfec886382a8c84ba3b0ecad92b39753" name="plasma5-workspace-debugsource" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="63d3ece41874522634bcf8e5ee562ab8deeb710212753fe7b9f6ec9cb09ba04e" name="plasma5-workspace-debugsource" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="c5ae80af2b352ffad25bc4e16a065bcf397204fd0b06339a60e01c23c93092d0" name="plasma5-workspace-debugsource" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="67323739bbb33cbedbb5477e4aabaa163066a77d7e7108dfc2e41236398f9b7a" name="plasma5-workspace-libs-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="5c17d83a5f249fe5b12f3b455a9bab51cc51ed2324ab05ef29c2527bfd859a31" name="plasma5-workspace-libs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="ce2d68d9fef07b455fc1d298bab85bceab0d5ad51a95ed82bdbd00f6064dd54f" name="plasma5-workspace-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="ff0c2f8457d074be48f2106ef31e261d6623cec89384ca3cb318f85dc3652fd9" name="postgresql12-orafce-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="3167da2d2bfe79e00c16a67f77c8dd820fcdaf756c89c4ff0402ea85ff11b0a7" name="postgresql12-orafce-debuginfo" arch="i586">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="dc96e7f0b77dee5d238d1d82f1502e46ecf5ffc755837425a34ffa1716b5ca82" name="postgresql12-orafce-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="040370b8a1b29c9e038538eff67b99f9804984b000c0c85945ce45b0a7ff3a2c" name="postgresql12-orafce-debuginfo" arch="s390x">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="a88a4e8d7281daf78613f1ace6ea713d20350d57337acdf99f8700d0a703d3a3" name="postgresql12-orafce-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="2a30ff51e21ceda62da923ab25f9e434d6bf8051cf3f50086f7f00607730067c" name="postgresql12-orafce-debugsource" arch="aarch64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="19a192879edd7c3ff8854a96e30c251c91a1d0bf80484973726e94cb4aeb75c9" name="postgresql12-orafce-debugsource" arch="i586">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="5376a1c97035dfebe70c370d56f7b4cae676f3be19a2a6fce0be057c9db2f07e" name="postgresql12-orafce-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="55bc7510cab4747ad6c206080fe72556ba151794c611df1fe97e3cb739a01730" name="postgresql12-orafce-debugsource" arch="s390x">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="2e38aee845b1e04fcee39c91ec7c3519f9e4c472e291581faa4595b640067d00" name="postgresql12-orafce-debugsource" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="99f3d186611d31fd85bdc409c533eebd9a0de0cbe35b7d91c76a1c46762f8002" name="postgresql13-orafce-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="2c766a19faa49a6cfb4aba8bc642d65069c2833d7c6f7315836f747ee889dcc8" name="postgresql13-orafce-debuginfo" arch="i586">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="dda379b2eb2bc282e67ab1cdfc2a14f15e5fc88d1e4d4f27a3ae5b05f11e6d8d" name="postgresql13-orafce-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="d5933b8a11ef45bc3fafc51d27a7fe1fb698289f19b505e826361e28a5fc74d5" name="postgresql13-orafce-debuginfo" arch="s390x">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="bb6370bce4e255f6f94e11068fee71f55d39aca5de82f9733086995811cbcbf3" name="postgresql13-orafce-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="6cb029b84640d4f9da4cc73e56454d2591ce7f91daf4d5fa6e2d9820ef3a9160" name="postgresql13-orafce-debugsource" arch="aarch64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="a4cc4e46e73b23317833fef3ac7d51cf99d4650cdf4a16a7b68731d8726e5bf0" name="postgresql13-orafce-debugsource" arch="i586">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="38bab6e1918ba3aa341df95098ce6c174ae9645e50845d2d3fc61b43d500e004" name="postgresql13-orafce-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="c94d34b3d038eb9d78e8b640718cbc2b63b491dc19ee2a358b8ff49bb684452e" name="postgresql13-orafce-debugsource" arch="s390x">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="2903b87d35ddbd04ea43afaa750bcbc2685de20e26b3b8f50b365e371b707afb" name="postgresql13-orafce-debugsource" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="9d8ac5ae65db3179c02fe002dca27b501b9d791a0894a70ac210e2f4f1f0c806" name="postgresql14-orafce-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="1965109d285a4d1e682ce9fee2561501432c354025e0f0023e6f9ee2d66334ef" name="postgresql14-orafce-debuginfo" arch="i586">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="96f696c2c35c6aa38f3d718c0a5a7365630482f8ba3446e3ab896078ef1bac6f" name="postgresql14-orafce-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="7c21cd3c005824fdbe300503268b557ed20267f0f7bf859f74b401e92012149a" name="postgresql14-orafce-debuginfo" arch="s390x">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="615747dfb1d0c012754b9e538833fa111bbf6ba50674ff8823e7ec2d136d4e30" name="postgresql14-orafce-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="4e5f9b559de58aafa2784aa032997b2f3b1e3136ccbf8d35ebf40fd91852f49c" name="postgresql14-orafce-debugsource" arch="aarch64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="aa06cbf29b772901dcaeb31e8724bfd2de4e7142178b062738ab30909b4e5a10" name="postgresql14-orafce-debugsource" arch="i586">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="4ac34949489a2bb33a003d0f0f12d805cc8d7afb832032fe93a3fc7a7da323a9" name="postgresql14-orafce-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="1d62eb05f20270d6558a92038bdfb877a17109a6ad980eb1f8cca69a47ef7c46" name="postgresql14-orafce-debugsource" arch="s390x">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="b82b4a0a14e43bfb7bd15a366420679d31a69aa624e445702362b076d075685f" name="postgresql14-orafce-debugsource" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="ecc33278370a0b89580e1554b4adb207b40b02ce03a28043945205dd187232bc" name="postgresql15-orafce-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="0d44a3fc1ae3e689c11f6dece68ea41b7e469b9492e1a4b00e371b4bd57a38a0" name="postgresql15-orafce-debuginfo" arch="i586">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="6f0759cebeb298247935b9821f673bb1a831102a30f3edaa524cfdf8d9feb8c9" name="postgresql15-orafce-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="3576ec6b4eafe5fa367647d42d3e91aa81fd692462de5f3eb26f69d9a58979dc" name="postgresql15-orafce-debuginfo" arch="s390x">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="50d5153d5fe82ce66fa3c9686dc211284c9da36518b29a0fb569a1aaf86d7808" name="postgresql15-orafce-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="4110e14ce2ecf68e7440cf60e0e292c4b0c91e0f344fda41e11518f803853ea3" name="postgresql15-orafce-debugsource" arch="aarch64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="38cbc15dc2dbb6d001dd587e0856411b2a20e03fdeb71477da12b7014486a369" name="postgresql15-orafce-debugsource" arch="i586">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="9c8399e93a8aceee5a60545174a0d57275400b3ed1929e3ac2a7ab8b16042f05" name="postgresql15-orafce-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="a1b0e2f750d91023c65264bf90b13421457b7471807222610c70e1cb588d7c88" name="postgresql15-orafce-debugsource" arch="s390x">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="58cdc29d430e3422f07e026394aa03e185af538a9a5a50863dea8335b089157c" name="postgresql15-orafce-debugsource" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.519b5b5" rel="bp154.8.1"/>
  <changelog author="mrueckert@suse.de" date="1424347200">- update to 3.0.9
  * PostgreSQL 9.4 compilation
  * new datatype and related functions: oracle.date
  * new varchar2, nvarchar2 types and related functions
    (Amit Langote)
  * oracle.substr emulate better Oracle substr function behave
    (Vinayak Pokale)
  * fix few internal issues that breaks a PGXN tests (Pavel Stehule)</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- switch to multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1502366401">- update to 3.4.0
  * new aggregate function wm_concat
  * PostgreSQL 9.6, 10 are supported well
  * remove support for 8.3, 8.4, 9.0, 9.1 (only 9.2 and higher
    are supported)
  * new functions: sysdate, sessiontimezone, dbtimezone
  * remove support for 8.2
  * add support for 9.5
  * change the releasion number system
  * new functions: to_single_byte, to_multi_byte, nanvl, length,
    ltrim, btrim, rtrim, lpad, rpad
  * fix compilation issue in new code for Pg &lt;= 9.1</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1540468800">- Add build for PostgreSQL 11 and drop 9.3.
- BuildRequire server-devel instead of devel.</changelog>
  <changelog author="mrueckert@suse.de" date="1540641600">- Update to version 3.6.1+git24.cf58d28:
  * remove strict flag for nvl functions
  * minor cleaning
  * remove pre 9.4 support
  * fixes for 12
  * fix compile on PostgreSQL 12
  * missing reset fsec in ora_timestamptz_round function
  * #74 - badly joined comment
  * #75 set correct type for trunc and round two params functions - float4
  * allow usage of schema oracle and plunit
  * copy paste correction intarray -&gt; orafce
  * fix broken compilation on non MSC platforms
  * fix output path
  * add postgresql 10.3 target support need ICU header by path c:\icu
  * fix conversion from 'size_t' to 'int'
  * add 9.6 build environments fix C89 compatible compliance
  * fix nensenses related yyllex, using older form of bison option
  * new function  oracle.numtodsinterval
  * disallow functions from utl_file package on MS Windows
  * clean headers used by msvc
  * cleaning complete build on msvc
  * add missing files for windows compilation
  * fix #64
  * dba_segments view, cleaning
  * Fix formatting of examples.
  * Append documentation about how to translate REGEXP_SUBSTR Oracle function to PostgreSQL.
  * fix the position of a half-width space added by rpad().
  * enhancing emulation of Oracle views
  * fix some segfaults reported by Andreas Seltenreich #59
  * new few Oracle system views
  * prepare for 3.6
  * Minor bug in doc
  * Avoid setting unused variable value
  * Fix issue #54 - missing collatable flag for string types varchar2, nvarchar2.
  * Ensure LWLockRegisterTranche call in every session before LWLockAcquire call.
  * Preparation for 3.5 release.
  * add missing V1 signatures
  * Add Orafce Documentation and Oracle to PostgreSQL Migration Guide
- drop patch orafce-orafce_sql_yyparse-bison26.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1571745600">- adding postgresql12 to _multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1571745601">- Update to version 3.8.0+git4.a65cfb8:
  * return back missing files
  * fresh parser files
  * master is now unreleased 3.9
  * minor enhancing user_constraints view - use conrelid::regclass instead table_name. This will be  consistent with index name, and show schema for tables that are not on search_path
  * prepare for 3.8
  * qualify decode function to be installable on greenplum
  * fix PostgreSQL 12 support
  * missing files
  * typo
  * fix compilation and regress tests for PostgreSQL 11
  * Revert "Merge pull request #83 from kato-sho/fix-build-for-PG12"
  * Fix build for PostgreSQL 12
  * remove extra #include utils/nabstime.h
  * update against change format of FunctionCallInfo in PostgreSQL 12
  * fix compilation for pre PostgreSQL 12
  * fix compile for PostgreSQL 12
  * prepare for 3.7.2
  * bug fix release
  * fix bad filter in oracle.user_tables view
  * update NEWS
  * use older syntax for create operator command
  * add warning about possible compatibility issue
  * fix docs
  * null safe pipe operator for (n)varchar2 should be explicitly enabled (due compatibility)
  * bugfix should to use OR REPLACE clause
  * add bugfixes to update script
  * fix readme
  * more faster (n)varchar2 null safe concat
  * null safe concat operator for varchar2 and nvarchar2
  * fix compilation for PostgreSQL 12
  * target type should be qualified
  * broken formula for add_month
  * fix broken oracle.add_months for last day in month
  * fix comment assigned to wrong object
  * minor doc nvl</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273600">- remove dead PG versions</changelog>
  <changelog author="mrueckert@suse.de" date="1638273601">- Update to version 3.17.0+git12.e9ab8a3:
  * Fix some typos in plunit.c and plvdate.c.
  * Fix a non-standard function declaration.
  * pg_nextpower2_32 is available for pg13+|
  * fix typo in plvdate.c
  * fix typo in alert.c
  * Improve the place that double the size of a buffer
  * Fix access privileges of utl_file.tmpdir()
  * prepare for 3.17.0
  * This patch reproduce the same behavior of the regexp_* function with null input.
  * Fix version number in install script.
  * Remove duplicate variable declarations
  * Allow even longer runtimes in DBMS_UTILITY.GET_TIME test
  * prepare for 3.16.2
  * fix build for msvc
  * prepare for 3.16.1
  * sql/dbms_utility.sql: Allow longer test runtime
  * fix some shared memory leaks, reduce an possibility to raise an error 'lock requested error' by cleaning locks (these locks are not Postgres's locks) in dbms_alert_removeall and by triggering cleaning shared memory from locks related to closed processes when there are not free locks - per #PR 140 reported by @rbapin
  * prepare for 3.16.0
  * rename pipe type to orafce_pipe due conflict with pipe function from unistd.h
  * ensure public access to public schema
  * add missing sql file for 3.16
  * Add DBMS_UTILITY.GET_TIME function, it returns the current time in 100th's of a second from a point in time in the past. This function is used for determining elapsed time. This function is widely used in some Oracle installation for timing of functions or statements.
  * fix warning on MSVC
  * prepare for 3.15.1
  * Remove reference to pg_enc2name_tbl variable. It is not available on MSVC, and for this functionality it is not necessary
  * prepare for 3.15.0
  * function regexp_match cannot be used because it is available from Postgres 10
  * Add Oracle regexp_replace() function which supports start position and occurrence. It correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches() and regexp_replace(). All details of the implementation is explained in the documentation. Also include in this patch also include regression tests for regexp_replace() including the Oracle queries and results in comment.
  * just reformatting
  * just reformatting
  * Remove wrong and unused code.
  * Apply orafce rule for assignment on remaining call to position() and length.
  * Use better style for assignment instead of pseudo query.
  * - Improve performances by replacing SELECT ... INTO syntax with := - Replace call to regexp_match() by regexp_matches() to support   PostgreSQL 9.5 and 9.6. - Remove obsolete orafce--3.14.sql file - Update regression test to disable CONTEXT trace.
  * Add Oracle regexp_like(), regexp_count(), regexp_instr() and regexp_substr() functions. They correspond to the Oracle behavior and consist in plpgsql functions based on PG regexp_matches(). All details of the implementation is explained in the documentation. This patch also include a regression test regexp_func.sql including the Oracle queries and results in comment.
  * more ilustrative description of msvc project properties
  * Oracle.sysdate uses time zone stored in GUC orafce.timezone. The setting of configuration value was correct - the global variable orafce_timezone has correct content (it can be checked by SELECT oracle.dbtimezone(). But direct output of this GUC (show orafce.timezone) was broken because the handler of system timezone was used and the statement "show orafce.timezone" did same output like "show timezone", and it is surely wrong.
  * pre 3.14 changes
  * When nvarchar2 and varchar2 was introduced, then was not possibility to correctly set protransform column. Orafce used UPDATE of pg_proc table. Unfortunatelly, this new dependency was not coverget by entry in pg_depend. Today this issue breaks binary upgrade. Fix is simple - on new Postgres it uses ALTER FUNCTION SUPPORT, for older releases it tries to fix pg_depend table.
  * implementation of unistr function
  * Added ppc64le architecture
  * Added some transactions behavior differences
  * Catch dbms_random.string() output variation on big-endian
  * Fix the wrong filter in oracle.user_tables view in orafce--3.6--3.7.sql.
  * Update README.asciidoc
  * Update others.c
  * Use correct macros to convert between Datums and pointers.
  * note in readme
  * prepare for 3.13.4
  * forgotten files
  * prepare for 3.13.3
  * enable utf_file on MSWin
  * cleaning build on MSWin
  * reduce stack size
  * minor cleaning
  * prepare for 3.12
  * fix warning for postgres 13
  * fix asciidoc format
  * minor README fix
  * travis status
  * PostgreSQL 9.4 is not supported
  * example to trigger func
  * fix build and tests for older releases
  * trigger functions - ensure so only null or only empty string is used
  * fix: 'if' condition is always true
  * prepare for 3.11.1
  * missing test output file
  * only PostgreSQL 9.4 and higher are supported
  * Run the testsuite on travis-ci.org
  * clean warnings detected by -Wextra
  * forgot. GRANT
  * The previous securing of utl_file package required SECURITY DEFINER flags on functions. Using this flag is security risk. Insted using SECURITY DEFINER we allow READ from utl_file.utl_file_dir to PUBLIC. This design has one advantage - the final user can control usage of these function with granting user rights just only on table utl_file.utl_file_dir.
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * Update README.asciidoc
  * fix long standing bug - function with access to utl_file_dir should to has security definer flag
  * fix compilation against Postgres 13
  * small fixes and rewrite of utl_file paragraph
  * the safe dictionary in utl_file package can be identified by name too
  * Fix doc and comment about months_between returning numeric (not float8).
  * there are some differences between Oracle and Orafce
  * fix compilation on PostgreSQL 13 (by removing useless include), fix to_multi_byte('\')
  * prepare for 3.9.0
  * remove extra clean to allow repeateable build without bison
  * Orafce is licenced under 0-clause BSD licence
  * polishing licence
  * use postgres routines for printing float4, float8 values in to_char function (reduce garbage and trailing zeroes)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1638273602">- enable pg 13 and 14</changelog>
  <changelog author="mrueckert@suse.de" date="1675166400">- Update to version 4.1.1+git0.519b5b5:
  * prepare for 4.1.1
  * build on master (16) branch
  * use adv lock to synchronize start of pipe and alert tests
  * add connect by level &lt; num in migration docs
  * Hierarchical Query identifys the leaves
  * Update the connect_by_root example, for better semantics
  * fix: CONNECT_BY_ROOT in hierarchical query is converted to WITH RECURSIVE syntax
  * the table [200~utl_file.utl_file_dir is dumpable
  * fix compilation against pg master
  * prepare for 4.0.2
  * fix -wextra warnings
  * fix shadowed variable varning
  * fix msvc build for PostgreSQL 14
  * fix build for pg16
  * fix META file and prepare for 4.0.1
  * to_multi_byte and to_single_byte support euc_cn(gb2312)
  * add  oracle sql migration : CONNECT_BY_ROOT
  * fix oracle connect by
  * prepare for 4.0.0 release
  * remove obsolete ref on orafce_sql
  * rename shadow variable
  * initial merge of dbms_sql from orafce_sql
  * other cleaning after removing support for unsupported pg releases
  * increase version
  * remove support for PostgreSQL 10 and older
  * Fix database creation during installchecks for ICU cluster
  * fix dbms_output.serveroutput(true) clear the buffer.It conforms to the features of oracle.
  * prepare for 3.25.1
  * fix calculation of plvstr.is_prefix for negative numeric values - see issue #198
  * fix for pre 14 releases
  * doc and regress tests
  * remove useless func decl
  * support for older releases
  * initial implementation
  * initial
  * fix build against master (16) branch
  * wrap possible unsupported DDL to dynamic SQL
  * specify schema inside definition function tanh
  * only set editorconfig
  * prepare for 3.24.4
  * remove redundant ALTER FUNCTION #191
  * prepare for 3.24.3
  * PostgreSQL older than 12 doesn't allow ALTER FUNCTION pg_catalog.x SET SCHEMA oracle. Only dirty way by direct modification of system catalogue is possible. see issue #190
  * prepare for 3.24.2
  * fix missing oracle.mod functions in update scripts
  * prepare for 3.24.1
  * fix regress nlssort test for PostgreSQL 9.5 without \if command
  * Fix race condition during initialization in ora_lock_shmem.
  * nlssort: Add a missing call to PG_RE_THROW.
  * Limit nlssort test to Linux/glibc systems with en_US.utf8 installed.
  * NEWS
  * set storage for varchar2 and nvarchar2 to extended strategy
  * prepare for 3.23
  * fix broken calculation in plvdate_isleapyear function #184
  * fix support for pg9.5, fix regress tests for older releases
  * prepare for 3.22.1
  * Fix read past the end of string in to_sigle_byte().
  * Fix dbms_utility.get_time() to use the full range of int32.
  * fix readme
  * prepare for 3.22.0
  * move dbobjects from public and pg_catalog schemas to oracle schema
  * moving objects from public and pg_catalog to oracle schema
  * move RequestAddinShmemSpace to shmem_request_hook for PostgreSQL 15
  * Update sql_migration06.md
  * Restore sqlparse.c and sqlparse.h
  * Undo comment
  * Add comment
  * Add Parallel safe to mod function
  * Bug fix
  * Add mod function for Oracle compatibility
  * Fix typos and spelling in docs and error messages
  * prepare for 3.21.1
  * fix mswin build - regexp functions was not really marked as dllexport due missing include of builtins.h
  * remove empty line
  * fix of some compatibility issues
  * REG_NOSUB is working only on PostgreSQL 15
  * workable release for PostgreSQL 15
  * modification for compotibility with orafce.regexp_instr
  * backport regexp_instr from PostgreSQL 15, use C version instead PLpgSQL for better possibilities of usage regexp API
  * prepare for 3.20.0
  * Fix regexp_instr() function with occurrence when the same value matching a pattern is found at several place in the string.
  * signature of nvl2 function is enhanced to "any", anyelement, anyelement. After this change, the behavior is more close to Oracle. Unfortunatelly - this change can break extension update for some customers that uses nvl2 in views.
  * support negative start argument for function substrb. Originally orafce used buildin bytea substr function. Now it recalculate start argument. see issue #172
  * prepare for 3.19
  * Allow empty string on input of functions to_number and to_date. In this case returns NULL.
  * remove white spaces
  * replace obsolete CSTRING macro by text_to_csring function
  * prepare for 3.18.1
  * fix - badly handled fn_extra in oracle.greatest(least) function
  * prepare for 3.18.0
  * Update README.asciidoc
  * Update README.asciidoc
  * use older API for iteration over an array. Now, oracle.greatest and oracle.least are working on all supported releases
  * remove negative tests related to orafce.greatest because: a) error message is different on supported pg versions, b) the coverage and benefit of these tests is low
  * remove two lines from regress tests of greatest due dependency on used collate
  * Add documentation for greatest and least functions.
  * Update upgrade extension file with the smallint addition.
  * Add greatest/least SQL redefinition for smallint Add regression tests fot the two functions.
  * Oracle functions LEAST and GREATEST return NULL if at least one of the parameters is NULL. This is not the case for the PostgreSQL equivalent functions which only return NULL when all the parameters are NULL. This patch creates the two functions in the oracle schema to have the same behavior than in Oracle.
  * Minor grammatical fix to README.asciidoc
  * fix typo in charpad.c
  * fix typo in orafce--3.17.sql
  * Update Orafce_Documentation_05.md
  * Catch dbms_random.string() output variation on Windows</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166401">- enable pg 15</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1675166402">- remove pg 10 support</changelog>
  <changelog author="Emiliano Langella &lt;emiliano.langella@suse.com&gt;" date="1676030400">- Added "Name:" tag.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1683806400">- relax hard version require to be equal greater or equal</changelog>
</package>
<package pkgid="1da9658a6f36ea46d2d5a81ef0d133de85404adb52bda56c2b79bb572880f8c3" name="proftpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="0abca729110f2ee025399a87a505cc9b6aadde482763954d76cbcae461f98b90" name="proftpd-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="53e5d5313c8baffccae1d9fb3bd2d18ac1b99688b7d793dd0978ce7953f8fb29" name="proftpd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="dd0eeb97add31cb5cd7eadba5e555cb1c40e89f07efcb00a4f09f7a9fd6f5b88" name="proftpd-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="5bce8d6911b1f3babf2a7fb7e88dfacdc3260bd883c52fa2eb92e736ab534d09" name="proftpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="e5e0df9a9d1a61d4644f3e413f6e9cff706142b71246914a5cc6062af37bf57a" name="proftpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="d41825a5fe33dbfaa6444819fd33723abef8714d8012b75d80db3524665db438" name="proftpd-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="1f02a12aa45a20aa5f07c353f83684b883a137878cb6d6471e869df897e58c4e" name="proftpd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="8092276763e280950f3619443925cdcd727d2ef41cac2dd0d945ab80de2c90f9" name="proftpd-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="8b7e7018da33847bf203ca16e7c500ae6c3eb87d6e722f9415ff226f73374780" name="proftpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="f87b533fb8aebb3522b013fca5253f9d4893deb4423330e0623312a71ff92dc7" name="proftpd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="ab37ebc9fdf16085c101d61f281b825944939f6c153e68e95f1e13fe7a6f5c7e" name="proftpd-debugsource" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="8475875f2d17d05fed32bbb736122156e79ea19a03b6c9f8b0055b59e92e725c" name="proftpd-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="e4b85d25edb3532a102c280fdb6964ff8777e88e00e5a5981377ac2ae8e6fec7" name="proftpd-debugsource" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="748029e1e0e0bb1a099fff0a4bd9a32a66cc04b11bac0d0c577b01da8df6f6dc" name="proftpd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="65565d85ef6f03c9271acbce2a206a16cb5b9f60ead6080b87acafd7734d754c" name="proftpd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="9340994b21f20a99d20832f178e29b1ad79f8a381a4d4e3c1d3162c03e6640eb" name="proftpd-debugsource" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="32154b4ecd5c704eb13ab16ee963eacf6f4dea171894c9d171ba3f71ea3a43c4" name="proftpd-debugsource" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="1f288bf7c5d69c2f0795642d1056357361868a2802312c76451255021bfa9eac" name="proftpd-debugsource" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="39b46620920af8021f7ebb1919d043f2a15cc38e0b45331a43bca2f0a89b8ade" name="proftpd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="3b9f550e3c84d2cdf04445a25475fe88c9544a8d843157bf1739698483b37f97" name="proftpd-ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="73b46bdab41948258be27800359d27a0f5fc4f5da51e3fa81002c1883aebc7b7" name="proftpd-ldap-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="1a9a1c003ded1eaf503abd2a9c9aedf889b92d17261b57f6d09b735f52fb8410" name="proftpd-ldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="d37e7c550b886c2b14fd0ec1806667c26ccf3726256f124fc586e464a0594465" name="proftpd-ldap-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="10cfc407ed3ce90392d8d57c927f4daf4559c21b48766f4c57b5ccdea50ab19b" name="proftpd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="6e96683eeeaf76d5af989018bbd7b45dbda5606df701b4ae2f99685ee171480d" name="proftpd-ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="31bd227d320cc0f9a54bfb4d2e61bb68f8b8b63899f201c9a9447738cca16da9" name="proftpd-ldap-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="88c383ba2ba2fa52cc57238bb601b2e988fc46c0a09e4a18e434b1262199b52c" name="proftpd-ldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="dee7cd8498a71162654c6cbbc0326d3b19412564fd37d141a2605a9d6daf1590" name="proftpd-ldap-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="e23a2ab4a9ddfce0c9adaaacf4c8a92824b39362dfda74f0289d56692f886b23" name="proftpd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="db982c1ef2f12e6fd4ddeb92d3f290a576cb22df299bdb815f990148108e96f4" name="proftpd-mysql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="7ae396ddf3064f4c17b704b2774e73a7e66cea7743a6db699f5a48dfe004ad05" name="proftpd-mysql-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="a0b31f5d3fe7ac1aefb0a65d085caf30511898c344beaf12f7cd3ec993681b93" name="proftpd-mysql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="58bff7e7cd185bc77d7d8306d99621236ecbb30a3cdb8ea0c293a87e0862899b" name="proftpd-mysql-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="2f1daf88e2cd01461c75e8250cd5d99d71de94ec525cff6e6d618747034c990f" name="proftpd-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="ec9b311d5c27760c2367c42971492b78c3caff9ee3a96bcf7a96f6501df1dbf4" name="proftpd-mysql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="40c8d8c33e6c35e5d84aabdcb851380d734bb0350d43ca01a68f16e376580513" name="proftpd-mysql-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="3d74d9763decf3b7e2cf6143ee4c4a729813618487c197d90152060c04e04308" name="proftpd-mysql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="15ab4b74f81e1bed418abd645468a2614240f60a4ccd595d2cce8d322b689e62" name="proftpd-mysql-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="0440d7739b52cf4d2cf8f4cdc71d7dfa263fe0f7c863af191b7f3570b40e0954" name="proftpd-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="b63b3f2d8d219853dc067be284f5dee554f82232b8505e1e9c6eb94ab93585b5" name="proftpd-pgsql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="96158f8c5ccae6b6d6e9adf659bf145399b189e21bcd97f770eb0e3637674e17" name="proftpd-pgsql-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="19739af9699581d3215c45c2a6b8629527127448001169ade8cb112c5177fb65" name="proftpd-pgsql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="3d594433ef2864275b9fa9563be0480481c7bdd90c952f828efef1bc2a735b9c" name="proftpd-pgsql-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="4f7efe7c7f065ae64a92a4e1f0be7bbe52dfe9d597b1a5aea4d731bf2b2044c9" name="proftpd-pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="e83eebb626bc5e6199808a7644fac1660c88bd19395a6399d55eae31c73120d8" name="proftpd-pgsql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="9e96ad4015f5c5155129b2a38aef0569e914759c48722e5e4ad7993889fc2629" name="proftpd-pgsql-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="4aab0ed113e42ede3151fe8c0990a4cb27781e47b1b9c0127250551203a93237" name="proftpd-pgsql-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="9a158bfa272f8cb78fee997f57fef7456205a24025b2939f98bc0703a2310870" name="proftpd-pgsql-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="307acd55f3d8db886970d4c56697a39750cef98fc03544f376d8d79abaa770be" name="proftpd-pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="8b8263eb3f3d9d0e61b68911861069cce436b692e963f27ad89bb18ab9fd6dc7" name="proftpd-radius-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="0917f2ba92e4ba563c05bc38ac4efbf3215a12e654c1ebd6ec2b5a5f83894530" name="proftpd-radius-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="767600e8bec4fffc8fd4a187df4e0e5f0a49c4705c55b5707eaa2bc20480c2ba" name="proftpd-radius-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="664cc18172e5f4f30ae1caad9f43a75fbce9ae424783a95469a37dc93b5b5722" name="proftpd-radius-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="0afc93208e8d48c35b2a2671e91796364b134eab28d4a277b09514e6f05dc27d" name="proftpd-radius-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="dae0c4ac0250c8623794389983d1a9833e7f4990094b69b26024331194988bd1" name="proftpd-radius-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="ffef8389c1cb43f83a298cd3d245010dd3c96d2cd2b1dbe6bd93d1c34f40cb85" name="proftpd-radius-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="337e602c2cb9477032210dd5e7b95ca4d5c4d952bc11cf5ef7214539c914db1a" name="proftpd-radius-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="14f30810d85b8043e817894734f6208afac9c74e89e91c80b1a65e8e13adbe7a" name="proftpd-radius-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="552aaed60cac4640062e8a2237363438b7dafb84aedd2a1bb30ba9da7c72c436" name="proftpd-radius-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="406ee3c963fecf967e142a409e8407477bdc9596d5057328e57ddb52ee515251" name="proftpd-sqlite-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="021041452ed0ed1780f15f388f1614d0068f2c44d7523085f21a2861315f4bb4" name="proftpd-sqlite-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="1c88f6df93c88fb7957c01cdedb61fb556fec2599dcec68711dad7fb495a9052" name="proftpd-sqlite-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="ab728e6f08147b00616816d08299a808ea8554522036c5be363657ba30fbfd75" name="proftpd-sqlite-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="39ad9ad0a8dad72f87c6108443483d3abb5ef6e598d32b80e5f67a76c48c56e9" name="proftpd-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1500638400">- Sort SHARED_MODS list to fix build compare (boo#1041090)</changelog>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
</package>
<package pkgid="45bea60235256bb52d52596fed6c8ae733d2fd62e562cf6b77b69eadfecea492" name="proftpd-sqlite-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="6ef709285111b35203623960a53d664a40e53929aeac865afb5ae3c4ebc0f97b" name="proftpd-sqlite-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="77df2eba935dfffbf89df2884023940361832b4020402149cfefb7ec06397f67" name="proftpd-sqlite-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="bbf5775f3d91782655f0f021ad2dd9e555ebc7ca542b6e720f9c6afbc82d0a3f" name="proftpd-sqlite-debuginfo" arch="s390x">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="32c93a6c842c68d27f60cfdcfb220fa1ce5a4a86249370b58c5669b2bbdb2381" name="proftpd-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7e" rel="bp154.3.6.1"/>
  <changelog author="chris@computersalat.de" date="1531224000">- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch</changelog>
  <changelog author="chris@computersalat.de" date="1531310400">- update to 1.3.6
  * Support for using Redis for caching, logging; see the doc/howto/Redis.html
    documentation.
  * Fixed mod_sql_postgres SSL support (Issue #415).
  * Support building against LibreSSL instead of OpenSSL (Issue #361).
  * Better support on AIX for login restraictions (Bug #4285).
  * TimeoutLogin (and other timeouts) were not working properly for SFTP
    connections (Bug#4299).
  * Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
    the child processes to be terminated as well (Issue #461).
  * RPM .spec file naming changed to conform to Fedora guidelines.
  * Fix for "AllowChrootSymlinks off" checking each component for symlinks
    (CVE-2017-7418).
  - New Modules:
  * mod_redis, mod_tls_redis, mod_wrap2_redis
    With Redis now supported as a caching mechanism, similar to Memcache,
    there are now Redis-using modules: mod_redis (for configuring the Redis
    connection information), mod_tls_redis (for caching SSL sessions and
    OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
    in Redis).
  - Changed Modules:
  * mod_ban
    The mod_ban module's BanCache directive can now use Redis-based caching;
    see doc/contrib/mod_ban.html#BanCache.
  - New Configuration Directives
  * SQLPasswordArgon2, SQLPasswordScrypt
    The key lengths for Argon2 and Scrypt-based passwords are now configurable
    via these new directives; previously, the key length had been hardcoded
    to be 32 bytes, which is not interoperable with all other implementations
    (Issue #454).
  - Changed Configuration Directives
  * AllowChrootSymlinks
    When "AllowChrootSymlinks off" was used, only the last portion of the
    DefaultRoot path would be checked to see if it was a symlink.  Now,
    each component of the DefaultRoot path will be checked to see if it is
    a symlink when "AllowChrootSymlinks off" is used.
  * Include
    The Include directive can now be used within a &lt;Limit&gt; section, e.g.:
    &lt;Limit LOGIN&gt;
    Include /path/to/allowed.txt
    DenyAll
    &lt;/Limit&gt;
  - API Changes
  * A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553083200">- Reduce hard dependency on systemd to only that which is
  necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553601600">- Fix the Factory build: select the appropriate OpenSSL version
  to build with. (fix for boo#1113041)</changelog>
  <changelog author="chris@computersalat.de" date="1561982400">- update changes file
  * add missing info about bugzilla 1113041</changelog>
  <changelog author="chris@computersalat.de" date="1564747200">- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1570017600">- Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056)</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1572696000">- fix for boo#1155834
  * Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
  * Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed</changelog>
  <changelog author="chris@computersalat.de" date="1572782400">- fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
  * Fixed pre-authentication remote denial-of-service issue (Issue #846).
  * Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
  * Fixed symlink navigation (Bug#4332).
  * Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
  * Fixed SITE COPY honoring of &lt;Limit&gt; restrictions (Bug#4372).
  * Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
  * Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
  * included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
  * RPMLINT fix for env-script-interpreter (Badness: 9)</changelog>
  <changelog author="chris@computersalat.de" date="1577534400">- fix changes file
  * add missing info about boo#1155834
  * add missing info about boo#1154600
- fix for boo#1156210
  * GeoIP has been discontinued by Maxmind
  * remove module build for geoip
    see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
  * add upstream patch proftpd-tls-crls-issue859.patch</changelog>
  <changelog author="chris@computersalat.de" date="1580558400">- cleanup tls.template
  * remove deprecated NoCertRequest from TLSOptions</changelog>
  <changelog author="chris@computersalat.de" date="1582545600">- fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
  * Fixed regression in directory listing latency (Issue #863).
  * Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
    converting them to supported format.
  * Fixed use-after-free vulnerability during data transfers (Issue #903).
  * Fixed out-of-bounds read in mod_cap by updating the bundled libcap
    (Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1591358400">- update to 1.3.6d
  * Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
    variables when the environment variable is not present.
  * Issue 940 - Second LIST of the same symlink shows different results.
  * Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
  * Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
    requested.
  * Bug 4398 - Handle zero-length SFTP WRITE requests without error.
  * Issue 1018 - PidFile should not be world-writable.
  * Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
    some systems.
  * Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605787200">- Update to version 1.3.6e:
  + Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL &lt; 1.1: proftpd has had support for
  openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch.</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1634731200">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_proftpd.service.patch
  Modified:
  * proftpd.service</changelog>
  <changelog author="chris@computersalat.de" date="1646136000">- Update to version 1.3.7c:
  * http://proftpd.org/docs/NEWS-1.3.7c
  * http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
  * harden_proftpd.service.patch
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
  * proftpd.spec
  * proftpd_env-script-interpreter.patch</changelog>
  <changelog author="chris@computersalat.de" date="1648296000">- remove configure --disable-static</changelog>
  <changelog author="chris@computersalat.de" date="1648382400">- fix deps for SLES</changelog>
  <changelog author="chris@computersalat.de" date="1660046400">- 1.3.7e - Released 23-Jul-2022
  * Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
  * Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
  * Issue 1325 - NLST does not behave consistently for relative paths.
  * Issue 1346 - Implement AllowForeignAddress class matching for passive data
    transfers.
  * Bug 4467 - DeleteAbortedStores removes successfully transferred files
    unexpectedly.
  * Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
    SOL_SOCKET.
  * Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
    data connection.
  * Issue 1396 - ProFTPD always uses the same PassivePorts port for first
  transfer.
  * Issue 1369 - Name-based virtual hosts not working as expected after upgrade
    from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch</changelog>
  <changelog author="chris@computersalat.de" date="1662033600">- Update proftpd-basic.conf.patch
  * remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch</changelog>
</package>
<package pkgid="0c366f60128acae56d8c2abc2da9cadd0d7daa72cb676afed7d5404fe92c10cb" name="python-pivy-debugsource" arch="aarch64">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="fa8bfc21f0233d78bf0b6e24c6878bafead897d96c7f01cd402abaea842b7eb5" name="python-pivy-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="c70e7c41e3f9ee6cff2f15d84fb5ad4bc8230d0cf76214da93b22d5122121e43" name="python-pivy-debugsource" arch="s390x">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="a8e33a369697dd2d5247efb00b15a3bfcff252e6f86d384eb478b9f5b569a6dc" name="python-pivy-debugsource" arch="x86_64">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="ef180b684751fbbf8f58a2efbdd3b5c0528c0893d6e42e246984810e7db687fd" name="python3-gdcm-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="65a8751b757e49feb0fbcf962c62726f9568975b8d396c1e91d3b0017c2c2fa1" name="python3-gdcm-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="a032d2b57eceb2e70a1a8d2695ca0f6e1c78aa4362a7e749c2fdba715eba80d4" name="python3-gdcm-debuginfo" arch="s390x">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="444de067f50673c372ad9b9e00df6fa559dd6f846c905caf4306c5d57ededa8f" name="python3-gdcm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="bp154.2.5.1"/>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1582027200">- version 3.0.5
  * fix for API change in poppler</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1585483200">- poppler_api.patch added to fix API changes in poppler in TW</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1586865600">- Update poppler_api.patch to make UnicodeMap* const.
- Compile with -fpermissive so that this works on Leap 15.2 too</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1591617600">- Add patch to fix build on aarch64:
  * gdcm-2.8.8-dont_use_EOF.patch</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- version 3.0.6
  * no changelog available
  * poppler_api.patch removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1593518400">- version 3.0.7
  * no changelog available
  * gdcm-2.8.8-dont_use_EOF.patch removed (included in 3.0.7)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602936000">- version 3.0.8
  * Fix TestScanner1 test</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604404800">- fixed build system
  fix_charls2_patch removed
  0001-Fix-build-with-CharLS-2.1.0.patch added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1604577600">- typo corrected: fix_charls_2.patch removed</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1622808000">- 0002-gcc11-changes.diff added to fix TW build failure</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1627387200">- version 3.0.9 (no changelog)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1628510400">- Trim filler wording from some descriptions. Change the other
  descriptions to describe the package, rather than give
  instructions to the user.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1639396800">- version 3.0.10 (no changelog)
  * 0002-gcc11-changes.diff removed (included in source)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1646740800">- use compiler gcc11-c++ to fix Leap 15.4 build</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648209600">- version 3.0.11
  * Fix for a significant issue with JPEG-LS and RGB color space
  * tons of small bug fixes</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1648814400">- version 3.0.12
  * support for poppler 22.03 added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663588800">- version 3.0.18
  no changelog</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1663934400">- rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Brüns)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664798400">- Provides/obsoletes moved to lbgdcm-package (Thx DimStar)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1664971200">- version 3.0.19 - no changelog
  'Provides' Tag removed from ligdcm</changelog>
</package>
<package pkgid="5b9bb83a2ecb55190d786d9fe51517457355e0b36bdfbe07734c4bdb6ddd992b" name="python3-librepo-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="0fdd4d463bb9cab5aecb781c8032ada5b18b27d9b1dba6bea07613d75fbe5099" name="python3-librepo-debuginfo" arch="i586">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="cffb0f9f16c33a76a164e2559a1571a9e1c57b53baafb0f1a0de2f81e2070575" name="python3-librepo-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="543df68a46b5fd314f7527fadc9a33d0da72d61d7f454fd7e448a0ef5d66cecf" name="python3-librepo-debuginfo" arch="s390x">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="030e1a2ffec41b93c7b9716164ec74852056964c47bfa7ef1a0cf5335ce5f047" name="python3-librepo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.14.2" rel="bp154.2.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1487592000">- Update to 1.7.20</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1502625600">- Disable running unit tests by default because of random pygpgme failures</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1515067200">- Upgrade to 1.8.1
  + Fix memory leaks in Python bindings (gh#rpm-software-management/librepo#83)
  + Fix HTTP header checking to work with proxies (gh#rpm-software-management/librepo#86)
  + Change connection and low-speed default timeouts to sync with DNF/Yum
  + Fix max download speed from repo (rh#1227921)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1536840000">- Backport fix from upstream to use glibc's xattr instead of libattr
  * Add patch: 0001-stop-requiring-attr-xattr.patch
- Use full author identities in changelog entries</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536840001">- Fix RPM groups. Update descriptions so that librepo0
  (which is going to be installed most of the time) has something
  halfway useful.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1549195200">- Upgrade to 1.9.3
  + Replace expat with libxml2
  + Support using python-gpg instead of pygpgme
  + Fix major performance regression with libcurl-7.61.1
  + Add zchunk support
- Drop patch for backported fix that is part of this release
  * Patch: 0001-stop-requiring-attr-xattr.patch
- Add patch proposed upstream to fix progress reporting for zck
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch
- Fix RPM group and description for Python 3 subpackage
- Drop Python 2 subpackage</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033600">- Upgrade to 1.9.6
  + Fix progress reporting with zchunk files
  + Reduce download delays by using still_running correctly
  + Improve error handling, cleanup
  + Simplified lr_perform()'s loop to prevent busy wait
  + Require libcurl &gt;= 7.28.0
- Drop patch included in this release
  * Patch: PR138-Fix-progress-reporting-with-zchunk-files.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1554033601">- Add patch to fix fetching zck-compressed repos (rh#1694411)
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557489600">- Upgrade to 1.10.1
  + Clean up target-&gt;curl_handle rather than target-&gt;handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1557662400">- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1558699200">- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1575201600">- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1576324800">- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1594123200">- Upgrade to 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1597924800">- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1598097600">- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1612353600">- Update to 1.13.0
  + Fix the key string parsing in url_substitution
  + Fix memory leak in 'fastestmirror'
  + Download whole file when server doesn't support ranges (rh#1886706)
  + Various fixes for mirrors without ranges support and zchunk
  + Add support for pkcs11 certificate and key for repository authorization (rh#1859495)
  + Fix lr_perform() - Avoid 100% CPU usage
  + Drop Python 2 support
  + Add support for working with certificates used with proxy (rh#1920991)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1618315200">- Update to 1.14.0
  + Fix LRO_PRESERVETIME behavior
  + Support multiple checksums in xattr (rh#1931904)
  + Return "calculated" checksum if requested w/caching
  + Fix lr_yum_download_url in case lr_handle is NULL</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1629892800">- Update to 1.14.2
  + Recover from fsync fail on read-only filesystem (rh#1956361)
  + Reduce time to load metadata
  + Fix resource leaks
  + Fix memory leaks</changelog>
</package>
<package pkgid="7554bf97cc3c03440ed3124609f84a8c7d80d975ca2c83a1d37272afc842e22b" name="python3-netgen-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="8bb4849b3697f6d3d65094735191921412bf1c6ef85b0d1524f08d0b3a0c0ec4" name="python3-netgen-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="19a4937950d9c9b814b80862ed51f12ee78167d217a88ee34854af46f6e8ad50" name="python3-netgen-debuginfo" arch="s390x">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="75e90aa9ec04db75bb348d693057dc88ad705a1e830bd92fa3599c8e17c7f92e" name="python3-netgen-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.2105" rel="bp154.2.3.1"/>
  <changelog author="adrian@suse.de" date="1465819200">- Using source service to follow git master (pre-6.1)
- use new oce instead of OpenCASCADE
- enable openmpi
- use fixes for rpath from Johannes Obermayer
  Sun Jan 23 2014 Torben Hansen &lt;build at sciomnis dot com&gt;
- Changed to upstream version</changelog>
  <changelog author="adrian@suse.de" date="1485864000">- enable python for openSUSE Tumbleweed</changelog>
  <changelog author="adrian@suse.de" date="1501243200">- switch to OpenCASCADE 7.1.0 and newer boost</changelog>
  <changelog author="adrian@suse.de" date="1510056000">- switch to OpenCASCADE 7.2.0</changelog>
  <changelog author="adrian@suse.de" date="1512734400">- move include files into /usr/include/netgen/
- use -fno-strict-aliasing
- add some extra header wrapper files missed by FreeCAD</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910400">- update to version 6.2.1810
  obsoletes:
    allow_fine_curves.patch
    occ-pi-constant.patch
    do_stl_init.patch
- switch to cmake, obsoletes AM_PROG_AR.patch
- use obs_scm, obsoletes svnfetch.sh and netgen.sh</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910401">- Remove ldconfig calls since there are only dlopened plugins,
  no standard libraries.
- Wrap description.
- Use convenient %make_install, and run fdupes.</changelog>
  <changelog author="Adrian Schr&#xF6;ter &lt;adrian@suse.de&gt;" date="1552910402">- switch to gcc7</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552910403">- Correct License:, netgen has always been LGPL-2.1-only.
- Package License file.
- Remove boost BuildRequires:, it is not used at all.
- Guard Requires: occt-devel in devel package with bcond, so it
  does not get pulled in if netgen is built without OpenCascade.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1553169600">- Fix build on ARM and PPC, only include immintrin.h when SSE is available</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1614600000">- update to version 6.2.2101
  * no changelog provided
- Properly split package: libraries (as required by e.g FreeCAD),
  python-bindings, examples and standalone GUI.
- Drop upstream fix_build.patch
- Replace 0001-Allow-compilation-on-archs-beyond-x86.patch
  with -DUSE_NATIVE_ARCH=OFF
- Fix build:
  * Add 0001-Disable-backtrace-generation.patch, do not call "nm"
    or "addr2line" from library.
  * Add 0001-Set-explicit-OBJECT-library-type-for-internal-togl.patch
  * Add 0001-Throw-in-case-enum-value-is-unhandled.patch
  * Disable -Wl,--no-undefined, libs have circular dependencies
  * Add 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Enable Catch2 unittests, add
  0001-Optionally-use-system-provided-Catch2.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1620648000">- Exclude all 32bit archs, no longer supported upstream (fails to
  build).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1643284800">- update to version 6.2.2105
  * no changelog provided
- Drop upstream 0001-Fix-GetTimeCounter-for-Aarch64-variants.patch
- Add patches:
  * 0001-Optionally-prefer-system-wide-pybind11.patch
  * 0001-Throw-Exception-when-shape-has-invalid-type.patch
  * 0001-Fix-signedness-for-ARM-Neon-mask-type.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1644235200">- Fix RUNPATH on Leap 15.x</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1646395200">- Fix RUNPATH also for Leap/SLE 15.4, which now uses
  CMAKE_SKIP_INSTALL_RPATH=ON by default.</changelog>
</package>
<package pkgid="bca56e082efde3c4c39c44f2cc88b4f1dd97f9c9466c24f2d9f950f89522a4b8" name="python3-pivy-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="a63e1da5fa0705e31313b6ca96798c21d7b571d67b772c00934c59d5c7eb9076" name="python3-pivy-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="fa18f0b9b55f432fc8a72c2ab6478f2ff506e8527ff86499f808dffd25ac25e7" name="python3-pivy-debuginfo" arch="s390x">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="d70eff30e518f27ae947a657ec00713efeb5cafde088a9c4ee3450985943088d" name="python3-pivy-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.7" rel="bp154.2.3.1"/>
  <changelog author="kkaempf@suse.com" date="1505390400">- update to 0.6.2
  * builds for python3 (linux: 3.4, 3.5, 3.6; win: 3.5, 3.6)
    or python2 (2.7)
  * uses pyside instead of pyqt for soqt4 bindings
  * has many fixes (especially for FreeCAD)
- switch to github.com/FreeCAD/pivy, coin3d.org is dead</changelog>
  <changelog author="badshah400@gmail.com" date="1513425600">- Convert specfile to python-singlespec: fixes build failures in
  Factory. Doesn't build against python2 for unknown reasons, so
  turn off python2 modules until this is fixed.
- Use fdupes (added to BuildRequires) to link duplicate files.</changelog>
  <changelog author="dev@stellardeath.org" date="1514980800">- Fix build failure when using more than one python version:
  swig wrapper files were only generated the first time and
  and then kept for subsequent builds.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539086400">- Update to 0.6.3
  * qt5-support (qt4 not supported anymore)
- Update to 0.6.4
  * bool(coin.SoGroup) -&gt; True (also if group is empty) [same behaviour as py2]
  * add graphics arrow object
  * making it possible to compile with older coin version (without cmake) -&gt; setup_old.py
  * adding back qt4 compatibility (but tests are still qt5 depenent)
  * added pivy.version
  * some fixes
- %python_expand call to fdupes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1549281600">- Add Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch to fix
  build in Factory</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1557748800">- Add 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  This will allow using SoQt snapshots with stable Coin releases.
- Add 0002-Fix-the-qmake-executable-name.patch. The qmake executable
  is called qmake-qt5 for openSUSE.
- Run spec-cleaner</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1584187200">- Update to 0.6.5
  - Unifying release for merge of FreeCAD/pivy and
    bitbucket.org/coin3d/pivy repos
  - change pivy.graphics API to follow pep8 naming scheme
    suggestion.
  - workaround for beveled text
  - swig4.0 fix
  - update to latest coin (additional fakeheaders)
  - example Complex3dText: add license and shebang
    this was unintentional removed at some point
- Remove Fix-issue-39-PyUnicode_AsUTF8-returns-const-char.patch
  applied upstream
- 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
  adjusted</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1588852800">- Use correct macro %{python_version} instead of %{py_ver} to
  pack egg-info file.
- Drop macro definitions needed for obsolete openSUSE versions.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1645617600">- Update to 0.6.6:
  * finalizing cmake support
  * adding bindings to SoGeo*
- Drop 0001-Allow-using-SoQt-snapshots-with-stable-Coin-version.patch
- Use arch specific directory, add fix_python_installdir.patch
- Use cmake for building, drop
  0002-Fix-the-qmake-executable-name.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647000000">- Fix name of python interpreter executables (python3.8 instead of
  python38).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1647259200">- Fix one more case where sed env python was replaced with
  python38 instead of python3.8.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1651492800">- Update to 0.6.7:
  * aiming at python3.10 support
- Remove upstreamed fix_python_installdir.patch</changelog>
</package>
<package pkgid="8daef521881aef20bd046569d7cff4a3ecea258a39ef70cfd554f8f5f5c427a7" name="re2-debugsource" arch="aarch64">
  <version epoch="0" ver="20230301" rel="bp154.9.3.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604577600">- Update to version 2020-11-01:
  * Refactoring and fixes</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to version 2021-02-02:
  * Address `-Wnull-dereference' warnings from GCC 10.x.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618488000">- Update to 2021-04-01:
  * Make cached benchmarks actually use cached objects
  * Address some -Wmissing-field-initializers warnings
  * Make it easier to swap in a scalable reaer-writer mutex
  * In the shared library, set compatibility version and
    current version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623499200">- update to 2021-06-01:
  * Fix (|a)* matching more text than (|a)+
  * build system tweaks and developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1628251200">- update to 2021-08-01:
  * case-insensitive prefix acceleration</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to 2021-09-01:
  * Permit Unicode characters beyond ASCII in capture names</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1636113600">- Update to 2021-11-01:
  * Update Unicode data to 14.0.0
  * Address a `-Wshadow' warning</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1643976000">- Update to 2022-02-01:
  * Address a `-Wunused-but-set-variable' warning from Clang 13.x
  * Don't specify the -std flag in Makefile or re2.pc
  * Remove a redundant map access</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648814400">- Update to 2022-04-01:
  * Improve performance slightly
  * Prog::Fangout() is no longer experimental</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1650801600">- Switch build to CMake, otherwise CMake config is not installed.
  Required for Apache ORC and arrow, and google-or-tools.
  (https://github.com/google/re2/issues/304)
- Run some real tests via CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650974400">- Disable tests on ZSystems and RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651060800">- Disable tests on ARMv6</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651147200">- Avoid sporadic failures by setting until-pass on CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651406400">- Use Release config so O3 is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654084800">- update to 2022-06-01:
  * switch to cxx_std_11 and other developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670155200">- update to 2022-12-01:
  * Update to Unicode 15.0.0 data
  * cmake install now installs the pkg-config file</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675512000">- update to 2023-02-01:
  * improved support for ICU
- build with ICU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678190400">- update to 2023-03-01:
  * changes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Require GCC 12 on Leap due to code containing speed ups which
  require newer standards
- Allow tests to fail - they fail too often</changelog>
</package>
<package pkgid="84bbac3105711e53f2416ccdef734b10ce938d01b5e4376c22c6ab2b5d37b28f" name="re2-debugsource" arch="i586">
  <version epoch="0" ver="20230301" rel="bp154.9.3.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604577600">- Update to version 2020-11-01:
  * Refactoring and fixes</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to version 2021-02-02:
  * Address `-Wnull-dereference' warnings from GCC 10.x.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618488000">- Update to 2021-04-01:
  * Make cached benchmarks actually use cached objects
  * Address some -Wmissing-field-initializers warnings
  * Make it easier to swap in a scalable reaer-writer mutex
  * In the shared library, set compatibility version and
    current version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623499200">- update to 2021-06-01:
  * Fix (|a)* matching more text than (|a)+
  * build system tweaks and developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1628251200">- update to 2021-08-01:
  * case-insensitive prefix acceleration</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to 2021-09-01:
  * Permit Unicode characters beyond ASCII in capture names</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1636113600">- Update to 2021-11-01:
  * Update Unicode data to 14.0.0
  * Address a `-Wshadow' warning</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1643976000">- Update to 2022-02-01:
  * Address a `-Wunused-but-set-variable' warning from Clang 13.x
  * Don't specify the -std flag in Makefile or re2.pc
  * Remove a redundant map access</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648814400">- Update to 2022-04-01:
  * Improve performance slightly
  * Prog::Fangout() is no longer experimental</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1650801600">- Switch build to CMake, otherwise CMake config is not installed.
  Required for Apache ORC and arrow, and google-or-tools.
  (https://github.com/google/re2/issues/304)
- Run some real tests via CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650974400">- Disable tests on ZSystems and RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651060800">- Disable tests on ARMv6</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651147200">- Avoid sporadic failures by setting until-pass on CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651406400">- Use Release config so O3 is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654084800">- update to 2022-06-01:
  * switch to cxx_std_11 and other developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670155200">- update to 2022-12-01:
  * Update to Unicode 15.0.0 data
  * cmake install now installs the pkg-config file</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675512000">- update to 2023-02-01:
  * improved support for ICU
- build with ICU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678190400">- update to 2023-03-01:
  * changes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Require GCC 12 on Leap due to code containing speed ups which
  require newer standards
- Allow tests to fail - they fail too often</changelog>
</package>
<package pkgid="d8614a8ca642a9eda6b9efd4590a02ce13b43a0cc0557a8b13cec5f49af3898c" name="re2-debugsource" arch="ppc64le">
  <version epoch="0" ver="20230301" rel="bp154.9.3.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604577600">- Update to version 2020-11-01:
  * Refactoring and fixes</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to version 2021-02-02:
  * Address `-Wnull-dereference' warnings from GCC 10.x.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618488000">- Update to 2021-04-01:
  * Make cached benchmarks actually use cached objects
  * Address some -Wmissing-field-initializers warnings
  * Make it easier to swap in a scalable reaer-writer mutex
  * In the shared library, set compatibility version and
    current version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623499200">- update to 2021-06-01:
  * Fix (|a)* matching more text than (|a)+
  * build system tweaks and developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1628251200">- update to 2021-08-01:
  * case-insensitive prefix acceleration</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to 2021-09-01:
  * Permit Unicode characters beyond ASCII in capture names</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1636113600">- Update to 2021-11-01:
  * Update Unicode data to 14.0.0
  * Address a `-Wshadow' warning</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1643976000">- Update to 2022-02-01:
  * Address a `-Wunused-but-set-variable' warning from Clang 13.x
  * Don't specify the -std flag in Makefile or re2.pc
  * Remove a redundant map access</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648814400">- Update to 2022-04-01:
  * Improve performance slightly
  * Prog::Fangout() is no longer experimental</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1650801600">- Switch build to CMake, otherwise CMake config is not installed.
  Required for Apache ORC and arrow, and google-or-tools.
  (https://github.com/google/re2/issues/304)
- Run some real tests via CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650974400">- Disable tests on ZSystems and RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651060800">- Disable tests on ARMv6</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651147200">- Avoid sporadic failures by setting until-pass on CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651406400">- Use Release config so O3 is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654084800">- update to 2022-06-01:
  * switch to cxx_std_11 and other developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670155200">- update to 2022-12-01:
  * Update to Unicode 15.0.0 data
  * cmake install now installs the pkg-config file</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675512000">- update to 2023-02-01:
  * improved support for ICU
- build with ICU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678190400">- update to 2023-03-01:
  * changes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Require GCC 12 on Leap due to code containing speed ups which
  require newer standards
- Allow tests to fail - they fail too often</changelog>
</package>
<package pkgid="7c9572008d1167b218481aea0a2173e18b1f794ccb846d991770e5bdf64ee25d" name="re2-debugsource" arch="s390x">
  <version epoch="0" ver="20230301" rel="bp154.9.3.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604577600">- Update to version 2020-11-01:
  * Refactoring and fixes</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to version 2021-02-02:
  * Address `-Wnull-dereference' warnings from GCC 10.x.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618488000">- Update to 2021-04-01:
  * Make cached benchmarks actually use cached objects
  * Address some -Wmissing-field-initializers warnings
  * Make it easier to swap in a scalable reaer-writer mutex
  * In the shared library, set compatibility version and
    current version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623499200">- update to 2021-06-01:
  * Fix (|a)* matching more text than (|a)+
  * build system tweaks and developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1628251200">- update to 2021-08-01:
  * case-insensitive prefix acceleration</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to 2021-09-01:
  * Permit Unicode characters beyond ASCII in capture names</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1636113600">- Update to 2021-11-01:
  * Update Unicode data to 14.0.0
  * Address a `-Wshadow' warning</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1643976000">- Update to 2022-02-01:
  * Address a `-Wunused-but-set-variable' warning from Clang 13.x
  * Don't specify the -std flag in Makefile or re2.pc
  * Remove a redundant map access</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648814400">- Update to 2022-04-01:
  * Improve performance slightly
  * Prog::Fangout() is no longer experimental</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1650801600">- Switch build to CMake, otherwise CMake config is not installed.
  Required for Apache ORC and arrow, and google-or-tools.
  (https://github.com/google/re2/issues/304)
- Run some real tests via CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650974400">- Disable tests on ZSystems and RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651060800">- Disable tests on ARMv6</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651147200">- Avoid sporadic failures by setting until-pass on CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651406400">- Use Release config so O3 is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654084800">- update to 2022-06-01:
  * switch to cxx_std_11 and other developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670155200">- update to 2022-12-01:
  * Update to Unicode 15.0.0 data
  * cmake install now installs the pkg-config file</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675512000">- update to 2023-02-01:
  * improved support for ICU
- build with ICU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678190400">- update to 2023-03-01:
  * changes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Require GCC 12 on Leap due to code containing speed ups which
  require newer standards
- Allow tests to fail - they fail too often</changelog>
</package>
<package pkgid="6a8fb1c5d6ce576a1447a3f9fdd29c1de74b5cc0bef29b04f5cbfb7aae408b5b" name="re2-debugsource" arch="x86_64">
  <version epoch="0" ver="20230301" rel="bp154.9.3.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604577600">- Update to version 2020-11-01:
  * Refactoring and fixes</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to version 2021-02-02:
  * Address `-Wnull-dereference' warnings from GCC 10.x.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618488000">- Update to 2021-04-01:
  * Make cached benchmarks actually use cached objects
  * Address some -Wmissing-field-initializers warnings
  * Make it easier to swap in a scalable reaer-writer mutex
  * In the shared library, set compatibility version and
    current version</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623499200">- update to 2021-06-01:
  * Fix (|a)* matching more text than (|a)+
  * build system tweaks and developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1628251200">- update to 2021-08-01:
  * case-insensitive prefix acceleration</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1630497600">- Update to 2021-09-01:
  * Permit Unicode characters beyond ASCII in capture names</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1636113600">- Update to 2021-11-01:
  * Update Unicode data to 14.0.0
  * Address a `-Wshadow' warning</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1638705600">- Use newer libs and GCC on Leap 15.3 &amp; 15.4</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1643976000">- Update to 2022-02-01:
  * Address a `-Wunused-but-set-variable' warning from Clang 13.x
  * Don't specify the -std flag in Makefile or re2.pc
  * Remove a redundant map access</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1648814400">- Update to 2022-04-01:
  * Improve performance slightly
  * Prog::Fangout() is no longer experimental</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1650801600">- Switch build to CMake, otherwise CMake config is not installed.
  Required for Apache ORC and arrow, and google-or-tools.
  (https://github.com/google/re2/issues/304)
- Run some real tests via CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1650974400">- Disable tests on ZSystems and RISCV</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651060800">- Disable tests on ARMv6</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651147200">- Avoid sporadic failures by setting until-pass on CTest</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1651406400">- Use Release config so O3 is used</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1654084800">- update to 2022-06-01:
  * switch to cxx_std_11 and other developer visible fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1670155200">- update to 2022-12-01:
  * Update to Unicode 15.0.0 data
  * cmake install now installs the pkg-config file</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1675512000">- update to 2023-02-01:
  * improved support for ICU
- build with ICU</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1678190400">- update to 2023-03-01:
  * changes for other platforms</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1678363200">- Require GCC 12 on Leap due to code containing speed ups which
  require newer standards
- Allow tests to fail - they fail too often</changelog>
</package>
<package pkgid="8ad6159c62677ab64c13987b545a86ec96f8359ae0ff1a1b6758f701de9749cf" name="rxvt-unicode-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="70c4439c4b8c63288562fe38b61422817e8f5079add1c4667a9d7683702bb4ec" name="rxvt-unicode-debuginfo" arch="i586">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="6582deeb55f4cac63fae9179b1c677a5be1e5cc774a4ee903b10bcbf6c9b265a" name="rxvt-unicode-debuginfo" arch="ppc64le">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="36e2ab8c6d076cfccca5c6cc0e952989d27fd919238d5562eaf26ac83c0be9c6" name="rxvt-unicode-debuginfo" arch="s390x">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="eeee877a6b968aa3533bc475daf026aa99abd6ccd450ba1959eeda2aee79b571" name="rxvt-unicode-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="1fa5ccef4eaaea8257b7a1cd6c4463e6db51f69864854788ef2acc8b63124469" name="rxvt-unicode-debugsource" arch="aarch64">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="9036f1423c136c5b49add6fcb4b4d001c2467bc11af5006e6900883b301658fe" name="rxvt-unicode-debugsource" arch="i586">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="ff26be4b22bc6a235d1bb9caba859afe1dc0bd2da52919f8cabedb4eb34a1761" name="rxvt-unicode-debugsource" arch="ppc64le">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="510bacf04da2f20d8e17833f7b30015aab0a1059c317bb2cb41176e263d906cf" name="rxvt-unicode-debugsource" arch="s390x">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="b80a31d3b6e54e60648fbb01f92d82ae364157eb99d9ee560e136d1b4889857e" name="rxvt-unicode-debugsource" arch="x86_64">
  <version epoch="0" ver="9.26" rel="bp154.2.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1414929600">- Switch to individual pkgconfig() build requires
  instead of using metapackage xorg-x11-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1434369600">- sync categories in desktop files with xterm</changelog>
  <changelog author="mimi.vx@gmail.com" date="1434628800">- update to 9.21
  - fix pixel droppings on overdraw when a secondary core font has the
    same height but different ascent.
  - implement cvvis in terminfo as blinking cursor, to distinguish it
    from cnorm (emacs uses cvvis which is commonly a blinking cursor).
  - when xft support was compiled in, colour queries erroneously returned
    premultiplied values, this also affected internal queries, for example
    when calculating faded colour. alpha is now divided out when possible,
    which is more correct but loses colour resolution.
  - add DECSCUSR xterm extension to set the cursor to a vertical bar.
  - add 'extension:string' action, and associated on_action perl
    hook, for keysym resources that invokes actions provided by
    perl extensions. The 'perl:string' action and
    on_user_command hook are deprecated but still supported.
  - add 'builtin-string' action for keysym resources that restores string
    mappings for keys that have predefined actions in urxvt.
  - add -k option to urxvtc for killing the daemon process.
  - document urxvtd's -e/--eval option that was implemented in 9.16,
    but not documented.
  - add -dockapp option to make the wm treat urxvt as a dockapp.
  - add -mc option and multiClickTime resource to set the maximum time
    between multi-click select events (patch by Joe Peterson).
  - new 'eval' extension to evaluate arbitrary perl code with keysym
    bindings. The extension also provides methods that implement basic
    actions, such as pasting selections and scrolling.
  - the macosx-clipboard and macosx-clipboard-native extensions have been removed.
  - kuake extension now uses the kuake.hotkey resource to specify the hotkey.
  - new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
  - the 'matcher:list' feature of matcher now honours the launcher
    associated to a matched pattern.
  - speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
  - fix up/down commands of searchable-scrollback so that they always move
    to the previous/next logical line with a match, if any.
  - searchable-scrollback resource has been deprecated (use keysym instead).
  - extension parameter passing is deprecated (use resource mechanism instead).
  - upgrade to GPLv3 (see COPYING).
  - compile out of the box on Solaris 10, again.
  - fix height and position of the stippled area in next scrollbar (patch
    by Thomas Otto).
  - fix off-by-one bug causing the iso14755 window not to jump out of the
    way properly.
  - fix crash that may happen if a lib to which urxvt is linked to calls setenv.
  - fix memory leak in special_{encode,decode} perl methods.
  - fix refresh bug that occurs when reverse video is set on a cell
    containing a space and with the same bg and fg colour, red hat bug
    [#830236].
  - fix crash that may happen if an x error is received after a terminal
    window/popup has been destroyed already.
  - removed superfluous 0 digit from sgr terminfo sequence.
  - greatly improve colour allocation on colour-starved pseudocolour
    displays to avoid read-write cells instead of simply failing
    (this is only relevant for antique 8bpp frame buffers).
  - do not free fade colours when not doing fading (this is likely
    only relevant for antique 8bpp frame buffers).
  - do not specialcase 2 or 4 colour visuals, leading to
    simpler and actually more correct code.
  - hopefully no longer leak colours on !truecolour visuals.
  - use consistent method names (scr_recolour =&gt; scr_recolor).
  - use simpler (but slightly less bogus) formula for nearest
    colour choice (this is likely only relevant for antique 8bpp
    frame buffers).
  - remove fallback behaviour when initialising colours - the
    behaviour was inconsistent between startup vs. later and
    was only effective when valid colours couldn't be allocated.
  * add rxvt-unicode-9.21-xsubpp.patch to correct wrong harcoded patch in makefile
  * add rxvt-unicode-0001-Prefer-XDG_RUNTIME_DIR-over-the-HOME.patch
  * removed unused rxvt-unicode-remove_unused_attribute.patch</changelog>
  <changelog author="meissner@suse.com" date="1435060800">- %clean section removed, moved makeinstall to %install</changelog>
  <changelog author="mimi.vx@gmail.com" date="1435060801">- remove %{_terminfo}/r/rxvt-unicode</changelog>
  <changelog author="meissner@suse.com" date="1435147200">- install COPYING</changelog>
  <changelog author="mrueckert@suse.de" date="1437134400">- move requires for the terminfo files from terminfo to
  terminfo-base (boo #936332)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1478520000">- update to 9.22
  - NOTICE: this release updates terminfo.
  - add terminfo capabilities for various ctrl and shift-ctrl key variants
  - fix longstanding core font encoding bug where some character
    ranges could not be mapped from unicode to the font: affected
    encodings are big5, gb2312, iso8859-8 (hebrew), jis0201 and
    ksc5601 .
  - fix crash when the number of columns is 1 and a 0 width character is inserted
  - fix a crash when parsing an invalid color specification
  - fix a buffer overflow in font name parser
  - do not start blinking cursor if the window is unfocused
  - change the width of underline and i-beam cursor to 2 pixels (based on
  a patch by Omar Sandoval).
  - add pointerShape resource to change the mouse pointer shape
  - a keysym resource for a key which is already bound to an
  action now properly rebinds the key.
  - do not report mouse motion events if Shift is active
  - put the alpha component last in responses to OSC color queries
  - the key_press hook is now invoked before processing the
  event, as documented. This change was done in 9.21 but not
  announced and fixes debian bugs #511377, #531751 and red hat
  bug #1105069. Note that this change breaks a few scripts,
  such as mark-yank-urls, which rely on the previous buggy
  behaviour that urxvt processes the event (in particular
  keysym bindings) before invoking the hook.
  - the tabbed extension now properly refreshes the active tab
  on a key press when the mouse pointer is outside the terminal
  window.
  - add 'lookup_keysym' perl method to lookup the action bound
  to a key combination.
  - a key combination bound to 'matcher:select' can now be used
  to cycle through the matches in matcher.
  - change perl integer accessors (-&gt;width et al.) into mutators.</changelog>
  <changelog author="mrueckert@suse.de" date="1496232000">- added rxvt-unicode-hardening.patch: (boo# 1036456)
  While urxvt is not directly affected by CVE-2017-7483. We add a
  patch to harden urxvt to avoid similar bugs in the future.</changelog>
  <changelog author="glin@suse.com" date="1522843200">- added rxvt-unicode-secondarywheel.patch from to add the new
  option: secondaryWheel to enable mouse scrolling for the pagers,
  e.g. less, man, vim, etc.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1606392000">- add rxvt-unicode-9.22-perl_environ_segfault.patch to avoid a
  segfault when closing urxvt</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1610452800">- fix build error (pass -D to "install")
- fix one  W: rpm-buildroot-usage
- ran spec-cleaner and tidy
- format rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch for autosetup
- format rxvt-unicode-9.22-perl_environ_segfault.patch for autosetup</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612872000">- restore the -256color binaries</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621252800">- Update to 9.26
  - ev_iouring.c was wrongly required during compilation, and wrongly
    not packaged.
- Update to 9.25 (boo#1186174 CVE-2021-33477)
  - for the 17.5th anniversary, and because many distributions seem to
    remove rxvt in favour of urxvt, this release resurrects rclock as
    urclock.
  - add support for systemd socket-based activation - debian bug #917105,
  freebsd bug #234276.
  - do not destruct perl on exit anymore: this might fail for a variety of
    reasons, and takes unneccessary time.
  - remove any macros from urxvtperl manpage(s), should fix debian
    bug 858385.
  - the old bg image resources are now provided by the background
  extension, and perl is thus required for bg image support. No
  configuration change is needed: urxvt autoloads the background
  ext if any bg image resource/option is present (for OSC sequences to
    work you need to enable it explicity). The old bg image
  resources are also now deprecated; users are encouraged to
  switch to the new bg image interface (see man urxvt-background).
  - confirm-paste now checks for any ctlchars, not just newlines.
  - searchable scrollback will now ignore bracketed paste mode sequences
    (prompted by Daniel Gröber's patch).
  - drop ISO 2022 locale support. ISO 2022 encodings are not supported in
    POSIX locales and clash with vt100 charset emulation (the luit
    program can be used as a substitute).
  - perl didn't parse rgba colours specified as an array correctly,
    only allowing 0 and 100% intensity for each component (this affected
    fill and tint).
  - when iterating over resources, urxvt will now try to properly handle
    multipart resources (such as "*background.expr"), for the benefit
    of autoloading perl extensions.
  - ESC G (query rxvt graphics mode) has been disabled due to security
    implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,
    and no programs relying on being able to query the mode are known.
  - work around API change breakage in perl 5.28, based on a patch by
    Roman Bogorodskiy.
  - improved security: rob nation's (obsolete) graphics mode queries
    no longer reply with linefeed in secure/default mode.
  - ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).
  - xterm focus reporting mode (patch by Daniel Hahler).
  - xterm SGR mouse mode.
  - implement DECRQM. Patch by P?emysl Eric Janouch.
  - add missing color index parameter to OSC 4 response. Patch
  by P?emysl Eric Janouch.
  - in some window managers, if smart resize was enabled, urxvt
  erroneously moved the window on font change - awesome bug
  [#532], arch linux bug ##34807 (patch by Uli Schlachter).
  - fix urxvtd crash when using a background expression.
  - properly restore colors when using fading and reverse video
  is enabled while urxvt is focused and then disabled while it
  is not focused, or vice versa (patch by Daniel Hahler).
  - fix high memory usage when an extension repeatedly hides and
  shows an overlay (reported by Marcel Lautenbach).
  - expose priv_modes member and constants to perl extensions
    (patch by Rastislav Barlik).
  - fix a whole slew of const sillyness, unfortunately forced upon
    us by ISO C++.
  - update to libecb 0x00010006.
  - disable all thread support in ecb.h as we presumably don't need it.
  - slightly improve Makefile source dependencies.
  - work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes
    in xhtml/html sections but does not interpret correct ones).
- New file: /usr/bin/urclock
- Add BuildRequires: pkgconfig(xt)
- Remove rxvt-unicode-9.22-perl_environ_segfault.patch (accepted upstream)
- Refresh patches:
  - rxvt-unicode-hardening.patch,
  - rxvt-unicode-9.21-xsubpp.patch
  - rxvt-unicode-9.20-CVE-2008-1142-DISPLAY.patch</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1621944000">- Backport patch from upstream: perl-avoiding-recursive-loading.patch</changelog>
</package>
<package pkgid="ac853df5ad0aec3f793bb0d608e5995b0876bf1f07527945c24af6a283ff809a" name="seamonkey-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="1f670555a0c0608fb0a93b9f93136158f93e837948af1da19b252429dd23a76d" name="seamonkey-debuginfo" arch="i586">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="56e3606b25849075bf23c5871230ea30e6dde2d5968e5cdf8c8a7020a4f4b0d2" name="seamonkey-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="1cf25868e9a4d5979ef6d91fb9ed3ae99b6815086b467d28f16f05a3b525f880" name="seamonkey-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.53.16" rel="bp154.2.6.2"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1664452800">- update to SeaMonkey 2.53.14
  * Updates to the following DOM HTML element interfaces: Embed,
    Object, Anchor, Area, Button, Frame, Canvas, IFrame, Link, Image,
    MenuItem, TextArea, Source, Select, Option, Script and
    Html. Please test add-ons.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Add ESR 102 links to debugQA bug 1779028.
  * Remove about plugins from help menu bug 1779031.
  * Dead links in cs_nav_prefs_advanced.xhtml [en-US] bug 1783558.
  * Dead links in cs_nav_prefs_advanced.xhtml bug 1786030.
  * Remove obsolete chat services from SeaMonkey address book bug
    1779034.
  * Address Book: "Get Map" button is not shown for home addresses bug
    1779319.
  * Added compatibility for rust 1.63
  * SeaMonkey 2.53.14 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.14 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- add seamonkey-spellcheck.patch to work around a circular dependency
  issue when compiling with GCC 12
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1203916</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1674216000">- update to SeaMonkey 2.53.15
  * Microtasks and promises bug 1193394.
  * Implement queueMicrotask()bug 1480236.
  * Remove old synchronous contentPrefService from the tree bug 886907
    and bug 1392929.
  * Remove remaining uses of 'general.useragent.locale' bug 1410736
    and bug 1410738.
  * Migrate to intl.locale.requested.locale list from
    'general.useragent.locale' bug 1441016.
  * Introduce a pref to store BCP47 locale list bug 1414390, bug
    1423532 and bug 1441026.
  * Remove synchronous certificate verification APIs from
    nsIX509CertDB bug 1453741 and bug 1453778.
  * Taskbar preview's favicon appears blank bug 1475524.
  * Call Imagelibs decodeImageAsyncWindows using a callback bug
    1790695.
  * Remove PermissionsService from process Windows sandboxing code bug
    1788233, bug 1789782 and bug 1794394.
  * Security info dialog doesn't show cert status anymore bug 1293378.
  * Replace nsIPlatfromCharset in mailnews bug 1381762.
  * Replace use of nsMsgI18NFileSystemCharset() with
    NS_CopyUnicodeToNative/NS_CopyNativeToUnicode() bug 1506422.
  * Cater for Outlook's/Hotmail's 'Deleted' folder bug 1320191.
  * Make some filter methods scriptable bug 1497513.
  * Fix crash in nsMsgFilterAfterTheFact::ApplyFilter() caused by
    async reset of 'm_curFolder' bug 537017.
  * Localize messages from nsIMsgFolder.logRuleHitFail() bug 1352731.
  * Add logging of message filter runs and actions bug 697522.
  * Check that we got a non-null header before running a filter on it
    (and crashing) bug 1563959.
  * With CONDSTORE, eliminate unneeded flag fetches at startup bug
    1428097.
  * Fix so custom tags (keywords) are visible to all users bug 583677.
  * Improve handling of tags on shared folders bug 1596371.
  * Allow setting/resetting junk marking by user for yahoo/aol to
    stick bug 1260059.
  * Don't check subject if spellchecker is not ready bug 1069787.
  * Grammar issues in mailnews_account_settings.xhtml bug 1793291.
  * Remove use of nsIMemory bug 1792578.
  * Replace obsolete GetStringBundleService call in SeaMonkey bug
    1794400.
  * SeaMonkey crashes on MacOS Ventura 13.0 bug 1797696.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Added support for clang 15 and macOS SDK 11.3.
  * Verified compatibility with Rust 1.65.
  * SeaMonkey 2.53.15 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.15 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.6
    and Thunderbird 102.5 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c9 to remove
  obsolete stuff and fix handling of Latam Spanish
- remove build dependency on obsolete rust-std-static
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1207332</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1680264000">- update to SeaMonkey 2.53.16
  * No throbber in plaintext editor bug 85498.
  * Remove unused gridlines class from EdAdvancedEdit bug 1806632.
  * Remove ESR 91 links from debugQA bug 1804534.
  * Rename devtools/shim to devtools/startup bug 1812367.
  * Remove unused seltype=text|cell css bug 1806653.
  * Implement new shared tree styling bug 1807802.
  * Use `win.focus()` in macWindowMenu.js bug 1807817.
  * Remove WCAP provider bug 1579020.
  * Remove ftp/file tree view support bug 1239239.
  * Change calendar list tree to a list bug 1561530.
  * Various other updates to the calendar code.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Verified compatibility with Rust 1.66.1.
  * SeaMonkey 2.53.16 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.16 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.9
    and Thunderbird 102.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c11 to reflect
  changes in the new way of packing langpacks
- remove obsolete patch mozilla-language.patch
- remove obsolete patch seamonkey-spellcheck.patch
- remove --enable-system-hunspell from .mozconfig per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1820413
- add build dependency on clang
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1209994</changelog>
</package>
<package pkgid="34b627c7c6156e5a620b71f0d7590ff641de4ca7ec7bcbd9018a867106321143" name="seamonkey-debuginfo" arch="i586">
  <version epoch="0" ver="2.53.16" rel="bp154.2.6.2"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1664452800">- update to SeaMonkey 2.53.14
  * Updates to the following DOM HTML element interfaces: Embed,
    Object, Anchor, Area, Button, Frame, Canvas, IFrame, Link, Image,
    MenuItem, TextArea, Source, Select, Option, Script and
    Html. Please test add-ons.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Add ESR 102 links to debugQA bug 1779028.
  * Remove about plugins from help menu bug 1779031.
  * Dead links in cs_nav_prefs_advanced.xhtml [en-US] bug 1783558.
  * Dead links in cs_nav_prefs_advanced.xhtml bug 1786030.
  * Remove obsolete chat services from SeaMonkey address book bug
    1779034.
  * Address Book: "Get Map" button is not shown for home addresses bug
    1779319.
  * Added compatibility for rust 1.63
  * SeaMonkey 2.53.14 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.14 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- add seamonkey-spellcheck.patch to work around a circular dependency
  issue when compiling with GCC 12
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1203916</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1674216000">- update to SeaMonkey 2.53.15
  * Microtasks and promises bug 1193394.
  * Implement queueMicrotask()bug 1480236.
  * Remove old synchronous contentPrefService from the tree bug 886907
    and bug 1392929.
  * Remove remaining uses of 'general.useragent.locale' bug 1410736
    and bug 1410738.
  * Migrate to intl.locale.requested.locale list from
    'general.useragent.locale' bug 1441016.
  * Introduce a pref to store BCP47 locale list bug 1414390, bug
    1423532 and bug 1441026.
  * Remove synchronous certificate verification APIs from
    nsIX509CertDB bug 1453741 and bug 1453778.
  * Taskbar preview's favicon appears blank bug 1475524.
  * Call Imagelibs decodeImageAsyncWindows using a callback bug
    1790695.
  * Remove PermissionsService from process Windows sandboxing code bug
    1788233, bug 1789782 and bug 1794394.
  * Security info dialog doesn't show cert status anymore bug 1293378.
  * Replace nsIPlatfromCharset in mailnews bug 1381762.
  * Replace use of nsMsgI18NFileSystemCharset() with
    NS_CopyUnicodeToNative/NS_CopyNativeToUnicode() bug 1506422.
  * Cater for Outlook's/Hotmail's 'Deleted' folder bug 1320191.
  * Make some filter methods scriptable bug 1497513.
  * Fix crash in nsMsgFilterAfterTheFact::ApplyFilter() caused by
    async reset of 'm_curFolder' bug 537017.
  * Localize messages from nsIMsgFolder.logRuleHitFail() bug 1352731.
  * Add logging of message filter runs and actions bug 697522.
  * Check that we got a non-null header before running a filter on it
    (and crashing) bug 1563959.
  * With CONDSTORE, eliminate unneeded flag fetches at startup bug
    1428097.
  * Fix so custom tags (keywords) are visible to all users bug 583677.
  * Improve handling of tags on shared folders bug 1596371.
  * Allow setting/resetting junk marking by user for yahoo/aol to
    stick bug 1260059.
  * Don't check subject if spellchecker is not ready bug 1069787.
  * Grammar issues in mailnews_account_settings.xhtml bug 1793291.
  * Remove use of nsIMemory bug 1792578.
  * Replace obsolete GetStringBundleService call in SeaMonkey bug
    1794400.
  * SeaMonkey crashes on MacOS Ventura 13.0 bug 1797696.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Added support for clang 15 and macOS SDK 11.3.
  * Verified compatibility with Rust 1.65.
  * SeaMonkey 2.53.15 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.15 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.6
    and Thunderbird 102.5 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c9 to remove
  obsolete stuff and fix handling of Latam Spanish
- remove build dependency on obsolete rust-std-static
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1207332</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1680264000">- update to SeaMonkey 2.53.16
  * No throbber in plaintext editor bug 85498.
  * Remove unused gridlines class from EdAdvancedEdit bug 1806632.
  * Remove ESR 91 links from debugQA bug 1804534.
  * Rename devtools/shim to devtools/startup bug 1812367.
  * Remove unused seltype=text|cell css bug 1806653.
  * Implement new shared tree styling bug 1807802.
  * Use `win.focus()` in macWindowMenu.js bug 1807817.
  * Remove WCAP provider bug 1579020.
  * Remove ftp/file tree view support bug 1239239.
  * Change calendar list tree to a list bug 1561530.
  * Various other updates to the calendar code.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Verified compatibility with Rust 1.66.1.
  * SeaMonkey 2.53.16 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.16 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.9
    and Thunderbird 102.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c11 to reflect
  changes in the new way of packing langpacks
- remove obsolete patch mozilla-language.patch
- remove obsolete patch seamonkey-spellcheck.patch
- remove --enable-system-hunspell from .mozconfig per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1820413
- add build dependency on clang
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1209994</changelog>
</package>
<package pkgid="dca82b527c5561f9dade2fd8df3e98bbe2e30bd1e0c71a33977ce3884599bab8" name="seamonkey-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.53.16" rel="bp154.2.6.2"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1664452800">- update to SeaMonkey 2.53.14
  * Updates to the following DOM HTML element interfaces: Embed,
    Object, Anchor, Area, Button, Frame, Canvas, IFrame, Link, Image,
    MenuItem, TextArea, Source, Select, Option, Script and
    Html. Please test add-ons.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Add ESR 102 links to debugQA bug 1779028.
  * Remove about plugins from help menu bug 1779031.
  * Dead links in cs_nav_prefs_advanced.xhtml [en-US] bug 1783558.
  * Dead links in cs_nav_prefs_advanced.xhtml bug 1786030.
  * Remove obsolete chat services from SeaMonkey address book bug
    1779034.
  * Address Book: "Get Map" button is not shown for home addresses bug
    1779319.
  * Added compatibility for rust 1.63
  * SeaMonkey 2.53.14 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.14 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- add seamonkey-spellcheck.patch to work around a circular dependency
  issue when compiling with GCC 12
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1203916</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1674216000">- update to SeaMonkey 2.53.15
  * Microtasks and promises bug 1193394.
  * Implement queueMicrotask()bug 1480236.
  * Remove old synchronous contentPrefService from the tree bug 886907
    and bug 1392929.
  * Remove remaining uses of 'general.useragent.locale' bug 1410736
    and bug 1410738.
  * Migrate to intl.locale.requested.locale list from
    'general.useragent.locale' bug 1441016.
  * Introduce a pref to store BCP47 locale list bug 1414390, bug
    1423532 and bug 1441026.
  * Remove synchronous certificate verification APIs from
    nsIX509CertDB bug 1453741 and bug 1453778.
  * Taskbar preview's favicon appears blank bug 1475524.
  * Call Imagelibs decodeImageAsyncWindows using a callback bug
    1790695.
  * Remove PermissionsService from process Windows sandboxing code bug
    1788233, bug 1789782 and bug 1794394.
  * Security info dialog doesn't show cert status anymore bug 1293378.
  * Replace nsIPlatfromCharset in mailnews bug 1381762.
  * Replace use of nsMsgI18NFileSystemCharset() with
    NS_CopyUnicodeToNative/NS_CopyNativeToUnicode() bug 1506422.
  * Cater for Outlook's/Hotmail's 'Deleted' folder bug 1320191.
  * Make some filter methods scriptable bug 1497513.
  * Fix crash in nsMsgFilterAfterTheFact::ApplyFilter() caused by
    async reset of 'm_curFolder' bug 537017.
  * Localize messages from nsIMsgFolder.logRuleHitFail() bug 1352731.
  * Add logging of message filter runs and actions bug 697522.
  * Check that we got a non-null header before running a filter on it
    (and crashing) bug 1563959.
  * With CONDSTORE, eliminate unneeded flag fetches at startup bug
    1428097.
  * Fix so custom tags (keywords) are visible to all users bug 583677.
  * Improve handling of tags on shared folders bug 1596371.
  * Allow setting/resetting junk marking by user for yahoo/aol to
    stick bug 1260059.
  * Don't check subject if spellchecker is not ready bug 1069787.
  * Grammar issues in mailnews_account_settings.xhtml bug 1793291.
  * Remove use of nsIMemory bug 1792578.
  * Replace obsolete GetStringBundleService call in SeaMonkey bug
    1794400.
  * SeaMonkey crashes on MacOS Ventura 13.0 bug 1797696.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Added support for clang 15 and macOS SDK 11.3.
  * Verified compatibility with Rust 1.65.
  * SeaMonkey 2.53.15 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.15 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.6
    and Thunderbird 102.5 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c9 to remove
  obsolete stuff and fix handling of Latam Spanish
- remove build dependency on obsolete rust-std-static
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1207332</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1680264000">- update to SeaMonkey 2.53.16
  * No throbber in plaintext editor bug 85498.
  * Remove unused gridlines class from EdAdvancedEdit bug 1806632.
  * Remove ESR 91 links from debugQA bug 1804534.
  * Rename devtools/shim to devtools/startup bug 1812367.
  * Remove unused seltype=text|cell css bug 1806653.
  * Implement new shared tree styling bug 1807802.
  * Use `win.focus()` in macWindowMenu.js bug 1807817.
  * Remove WCAP provider bug 1579020.
  * Remove ftp/file tree view support bug 1239239.
  * Change calendar list tree to a list bug 1561530.
  * Various other updates to the calendar code.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Verified compatibility with Rust 1.66.1.
  * SeaMonkey 2.53.16 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.16 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.9
    and Thunderbird 102.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c11 to reflect
  changes in the new way of packing langpacks
- remove obsolete patch mozilla-language.patch
- remove obsolete patch seamonkey-spellcheck.patch
- remove --enable-system-hunspell from .mozconfig per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1820413
- add build dependency on clang
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1209994</changelog>
</package>
<package pkgid="446a00e4996bb0738a94e4182e715e15a43618ed875db5e984a47ac282c24cd8" name="seamonkey-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.53.17.1" rel="bp154.2.11.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1664452800">- update to SeaMonkey 2.53.14
  * Updates to the following DOM HTML element interfaces: Embed,
    Object, Anchor, Area, Button, Frame, Canvas, IFrame, Link, Image,
    MenuItem, TextArea, Source, Select, Option, Script and
    Html. Please test add-ons.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Add ESR 102 links to debugQA bug 1779028.
  * Remove about plugins from help menu bug 1779031.
  * Dead links in cs_nav_prefs_advanced.xhtml [en-US] bug 1783558.
  * Dead links in cs_nav_prefs_advanced.xhtml bug 1786030.
  * Remove obsolete chat services from SeaMonkey address book bug
    1779034.
  * Address Book: "Get Map" button is not shown for home addresses bug
    1779319.
  * Added compatibility for rust 1.63
  * SeaMonkey 2.53.14 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.14 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- add seamonkey-spellcheck.patch to work around a circular dependency
  issue when compiling with GCC 12
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1203916</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1674216000">- update to SeaMonkey 2.53.15
  * Microtasks and promises bug 1193394.
  * Implement queueMicrotask()bug 1480236.
  * Remove old synchronous contentPrefService from the tree bug 886907
    and bug 1392929.
  * Remove remaining uses of 'general.useragent.locale' bug 1410736
    and bug 1410738.
  * Migrate to intl.locale.requested.locale list from
    'general.useragent.locale' bug 1441016.
  * Introduce a pref to store BCP47 locale list bug 1414390, bug
    1423532 and bug 1441026.
  * Remove synchronous certificate verification APIs from
    nsIX509CertDB bug 1453741 and bug 1453778.
  * Taskbar preview's favicon appears blank bug 1475524.
  * Call Imagelibs decodeImageAsyncWindows using a callback bug
    1790695.
  * Remove PermissionsService from process Windows sandboxing code bug
    1788233, bug 1789782 and bug 1794394.
  * Security info dialog doesn't show cert status anymore bug 1293378.
  * Replace nsIPlatfromCharset in mailnews bug 1381762.
  * Replace use of nsMsgI18NFileSystemCharset() with
    NS_CopyUnicodeToNative/NS_CopyNativeToUnicode() bug 1506422.
  * Cater for Outlook's/Hotmail's 'Deleted' folder bug 1320191.
  * Make some filter methods scriptable bug 1497513.
  * Fix crash in nsMsgFilterAfterTheFact::ApplyFilter() caused by
    async reset of 'm_curFolder' bug 537017.
  * Localize messages from nsIMsgFolder.logRuleHitFail() bug 1352731.
  * Add logging of message filter runs and actions bug 697522.
  * Check that we got a non-null header before running a filter on it
    (and crashing) bug 1563959.
  * With CONDSTORE, eliminate unneeded flag fetches at startup bug
    1428097.
  * Fix so custom tags (keywords) are visible to all users bug 583677.
  * Improve handling of tags on shared folders bug 1596371.
  * Allow setting/resetting junk marking by user for yahoo/aol to
    stick bug 1260059.
  * Don't check subject if spellchecker is not ready bug 1069787.
  * Grammar issues in mailnews_account_settings.xhtml bug 1793291.
  * Remove use of nsIMemory bug 1792578.
  * Replace obsolete GetStringBundleService call in SeaMonkey bug
    1794400.
  * SeaMonkey crashes on MacOS Ventura 13.0 bug 1797696.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Added support for clang 15 and macOS SDK 11.3.
  * Verified compatibility with Rust 1.65.
  * SeaMonkey 2.53.15 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.15 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.6
    and Thunderbird 102.5 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c9 to remove
  obsolete stuff and fix handling of Latam Spanish
- remove build dependency on obsolete rust-std-static
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1207332</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1680264000">- update to SeaMonkey 2.53.16
  * No throbber in plaintext editor bug 85498.
  * Remove unused gridlines class from EdAdvancedEdit bug 1806632.
  * Remove ESR 91 links from debugQA bug 1804534.
  * Rename devtools/shim to devtools/startup bug 1812367.
  * Remove unused seltype=text|cell css bug 1806653.
  * Implement new shared tree styling bug 1807802.
  * Use `win.focus()` in macWindowMenu.js bug 1807817.
  * Remove WCAP provider bug 1579020.
  * Remove ftp/file tree view support bug 1239239.
  * Change calendar list tree to a list bug 1561530.
  * Various other updates to the calendar code.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Verified compatibility with Rust 1.66.1.
  * SeaMonkey 2.53.16 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.16 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.9
    and Thunderbird 102.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c11 to reflect
  changes in the new way of packing langpacks
- remove obsolete patch mozilla-language.patch
- remove obsolete patch seamonkey-spellcheck.patch
- remove --enable-system-hunspell from .mozconfig per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1820413
- add build dependency on clang
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1209994</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1691150400">- update to SeaMonkey 2.53.17
  * Fix macOS Contacts permission request bug 1826719.
  * Remove SeaMonkey 2.57 links from debugQA bug 1829683.
  * Treat opening urls from the library as external bug 1619108.
  * Disable spam warning for autogenerated links in plaintext messages
    bug 619031.
  * Switch SeaMonkey build files to Python 3 bug 1635849.
  * Remove empty overlays from Composer bug 1828533.
  * Move xpfe autocomplete to comm-central suite bug 1418512.
  * Remove nsIPrefBranch2 and nsIPrefBranchInternal bug 1374847.
  * SeaMonkey 2.53.17 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.17 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.11
    and Thunderbird 102.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
  * Adapt mozilla-nongnome-proxies.patch for SeaMonkey 2.53.17
  * Adapt seamonkey-lto.patch for SeaMonkey 2.53.17
  * Remove obsolete %clean section from seamonkey.spec
- request inclusion in Leap 15.4 and 15.5:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1213986</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1695297600">- update to SeaMonkey 2.53.17.1
  * Upstream libwebp security fix bug 1852749.
  * CVE-2023-4863: Heap buffer overflow in libwebp bug 1852649.
  * Fix bad string encoded in ansi. l10n fr problem only bug 1847887.
  * SeaMonkey 2.53.17 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.17 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 115.3
    and Thunderbird 115.3 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- request inclusion in Leap 15.4 and 15.5:
  https://bugzilla.opensuse.org/show_bug.cgi?id=</changelog>
</package>
<package pkgid="5220951784a330f14f3b7ae3d929a74666c69e03123b3de717e195bf05828e6f" name="seamonkey-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.53.17.1" rel="bp154.2.11.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1664452800">- update to SeaMonkey 2.53.14
  * Updates to the following DOM HTML element interfaces: Embed,
    Object, Anchor, Area, Button, Frame, Canvas, IFrame, Link, Image,
    MenuItem, TextArea, Source, Select, Option, Script and
    Html. Please test add-ons.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Add ESR 102 links to debugQA bug 1779028.
  * Remove about plugins from help menu bug 1779031.
  * Dead links in cs_nav_prefs_advanced.xhtml [en-US] bug 1783558.
  * Dead links in cs_nav_prefs_advanced.xhtml bug 1786030.
  * Remove obsolete chat services from SeaMonkey address book bug
    1779034.
  * Address Book: "Get Map" button is not shown for home addresses bug
    1779319.
  * Added compatibility for rust 1.63
  * SeaMonkey 2.53.14 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.14 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- add seamonkey-spellcheck.patch to work around a circular dependency
  issue when compiling with GCC 12
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1203916</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1674216000">- update to SeaMonkey 2.53.15
  * Microtasks and promises bug 1193394.
  * Implement queueMicrotask()bug 1480236.
  * Remove old synchronous contentPrefService from the tree bug 886907
    and bug 1392929.
  * Remove remaining uses of 'general.useragent.locale' bug 1410736
    and bug 1410738.
  * Migrate to intl.locale.requested.locale list from
    'general.useragent.locale' bug 1441016.
  * Introduce a pref to store BCP47 locale list bug 1414390, bug
    1423532 and bug 1441026.
  * Remove synchronous certificate verification APIs from
    nsIX509CertDB bug 1453741 and bug 1453778.
  * Taskbar preview's favicon appears blank bug 1475524.
  * Call Imagelibs decodeImageAsyncWindows using a callback bug
    1790695.
  * Remove PermissionsService from process Windows sandboxing code bug
    1788233, bug 1789782 and bug 1794394.
  * Security info dialog doesn't show cert status anymore bug 1293378.
  * Replace nsIPlatfromCharset in mailnews bug 1381762.
  * Replace use of nsMsgI18NFileSystemCharset() with
    NS_CopyUnicodeToNative/NS_CopyNativeToUnicode() bug 1506422.
  * Cater for Outlook's/Hotmail's 'Deleted' folder bug 1320191.
  * Make some filter methods scriptable bug 1497513.
  * Fix crash in nsMsgFilterAfterTheFact::ApplyFilter() caused by
    async reset of 'm_curFolder' bug 537017.
  * Localize messages from nsIMsgFolder.logRuleHitFail() bug 1352731.
  * Add logging of message filter runs and actions bug 697522.
  * Check that we got a non-null header before running a filter on it
    (and crashing) bug 1563959.
  * With CONDSTORE, eliminate unneeded flag fetches at startup bug
    1428097.
  * Fix so custom tags (keywords) are visible to all users bug 583677.
  * Improve handling of tags on shared folders bug 1596371.
  * Allow setting/resetting junk marking by user for yahoo/aol to
    stick bug 1260059.
  * Don't check subject if spellchecker is not ready bug 1069787.
  * Grammar issues in mailnews_account_settings.xhtml bug 1793291.
  * Remove use of nsIMemory bug 1792578.
  * Replace obsolete GetStringBundleService call in SeaMonkey bug
    1794400.
  * SeaMonkey crashes on MacOS Ventura 13.0 bug 1797696.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Added support for clang 15 and macOS SDK 11.3.
  * Verified compatibility with Rust 1.65.
  * SeaMonkey 2.53.15 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.15 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.6
    and Thunderbird 102.5 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c9 to remove
  obsolete stuff and fix handling of Latam Spanish
- remove build dependency on obsolete rust-std-static
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1207332</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1680264000">- update to SeaMonkey 2.53.16
  * No throbber in plaintext editor bug 85498.
  * Remove unused gridlines class from EdAdvancedEdit bug 1806632.
  * Remove ESR 91 links from debugQA bug 1804534.
  * Rename devtools/shim to devtools/startup bug 1812367.
  * Remove unused seltype=text|cell css bug 1806653.
  * Implement new shared tree styling bug 1807802.
  * Use `win.focus()` in macWindowMenu.js bug 1807817.
  * Remove WCAP provider bug 1579020.
  * Remove ftp/file tree view support bug 1239239.
  * Change calendar list tree to a list bug 1561530.
  * Various other updates to the calendar code.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Verified compatibility with Rust 1.66.1.
  * SeaMonkey 2.53.16 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.16 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.9
    and Thunderbird 102.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c11 to reflect
  changes in the new way of packing langpacks
- remove obsolete patch mozilla-language.patch
- remove obsolete patch seamonkey-spellcheck.patch
- remove --enable-system-hunspell from .mozconfig per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1820413
- add build dependency on clang
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1209994</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1691150400">- update to SeaMonkey 2.53.17
  * Fix macOS Contacts permission request bug 1826719.
  * Remove SeaMonkey 2.57 links from debugQA bug 1829683.
  * Treat opening urls from the library as external bug 1619108.
  * Disable spam warning for autogenerated links in plaintext messages
    bug 619031.
  * Switch SeaMonkey build files to Python 3 bug 1635849.
  * Remove empty overlays from Composer bug 1828533.
  * Move xpfe autocomplete to comm-central suite bug 1418512.
  * Remove nsIPrefBranch2 and nsIPrefBranchInternal bug 1374847.
  * SeaMonkey 2.53.17 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.17 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.11
    and Thunderbird 102.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
  * Adapt mozilla-nongnome-proxies.patch for SeaMonkey 2.53.17
  * Adapt seamonkey-lto.patch for SeaMonkey 2.53.17
  * Remove obsolete %clean section from seamonkey.spec
- request inclusion in Leap 15.4 and 15.5:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1213986</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1695297600">- update to SeaMonkey 2.53.17.1
  * Upstream libwebp security fix bug 1852749.
  * CVE-2023-4863: Heap buffer overflow in libwebp bug 1852649.
  * Fix bad string encoded in ansi. l10n fr problem only bug 1847887.
  * SeaMonkey 2.53.17 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.17 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 115.3
    and Thunderbird 115.3 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- request inclusion in Leap 15.4 and 15.5:
  https://bugzilla.opensuse.org/show_bug.cgi?id=</changelog>
</package>
<package pkgid="0b7366adc0bb8753740541fd4e76aa893d4ea2bb8e0a59637e71eb2670c4ec75" name="seamonkey-debugsource" arch="aarch64">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="8bd786b6be6b8cfe3cc6dec8de817f170ed348f993ce7c7bc307d17bf030d0c6" name="seamonkey-debugsource" arch="i586">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="242e60f4e91056d2a24e7bea775b25b7c77cfb8d06e711c791d6ca7e995417d9" name="seamonkey-debugsource" arch="x86_64">
  <version epoch="0" ver="2.53.13" rel="bp154.2.3.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1619611200">- add upstream patch seamonkey-websocketloop.patch from
  https://bugzilla.mozilla.org/attachment.cgi?id=9218795&amp;action=diff
  to solve critical performance issue
  https://bugzilla.mozilla.org/show_bug.cgi?id=1633339</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620129600">- use system libraries for bz2, webp, and icu to reduce package size
  and because this is probably more secure (since our own libraries
  are probably updated more often than the ones bundled with
  SeaMonkey)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1620216000">- update GNU Makefile from upstream
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c8 -- besides
  some general improvements, this Makefile now allows the language
  packs for the bundled extensions to be split off again if desired
  (though our spec file does not yet take advantage of this)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
</package>
<package pkgid="906bf213dc861c735a1fa6d062dbd33ba5fe9cb0d41c528c1ca488b955fd6e1b" name="seamonkey-debugsource" arch="aarch64">
  <version epoch="0" ver="2.53.16" rel="bp154.2.6.2"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1664452800">- update to SeaMonkey 2.53.14
  * Updates to the following DOM HTML element interfaces: Embed,
    Object, Anchor, Area, Button, Frame, Canvas, IFrame, Link, Image,
    MenuItem, TextArea, Source, Select, Option, Script and
    Html. Please test add-ons.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Add ESR 102 links to debugQA bug 1779028.
  * Remove about plugins from help menu bug 1779031.
  * Dead links in cs_nav_prefs_advanced.xhtml [en-US] bug 1783558.
  * Dead links in cs_nav_prefs_advanced.xhtml bug 1786030.
  * Remove obsolete chat services from SeaMonkey address book bug
    1779034.
  * Address Book: "Get Map" button is not shown for home addresses bug
    1779319.
  * Added compatibility for rust 1.63
  * SeaMonkey 2.53.14 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.14 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- add seamonkey-spellcheck.patch to work around a circular dependency
  issue when compiling with GCC 12
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1203916</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1674216000">- update to SeaMonkey 2.53.15
  * Microtasks and promises bug 1193394.
  * Implement queueMicrotask()bug 1480236.
  * Remove old synchronous contentPrefService from the tree bug 886907
    and bug 1392929.
  * Remove remaining uses of 'general.useragent.locale' bug 1410736
    and bug 1410738.
  * Migrate to intl.locale.requested.locale list from
    'general.useragent.locale' bug 1441016.
  * Introduce a pref to store BCP47 locale list bug 1414390, bug
    1423532 and bug 1441026.
  * Remove synchronous certificate verification APIs from
    nsIX509CertDB bug 1453741 and bug 1453778.
  * Taskbar preview's favicon appears blank bug 1475524.
  * Call Imagelibs decodeImageAsyncWindows using a callback bug
    1790695.
  * Remove PermissionsService from process Windows sandboxing code bug
    1788233, bug 1789782 and bug 1794394.
  * Security info dialog doesn't show cert status anymore bug 1293378.
  * Replace nsIPlatfromCharset in mailnews bug 1381762.
  * Replace use of nsMsgI18NFileSystemCharset() with
    NS_CopyUnicodeToNative/NS_CopyNativeToUnicode() bug 1506422.
  * Cater for Outlook's/Hotmail's 'Deleted' folder bug 1320191.
  * Make some filter methods scriptable bug 1497513.
  * Fix crash in nsMsgFilterAfterTheFact::ApplyFilter() caused by
    async reset of 'm_curFolder' bug 537017.
  * Localize messages from nsIMsgFolder.logRuleHitFail() bug 1352731.
  * Add logging of message filter runs and actions bug 697522.
  * Check that we got a non-null header before running a filter on it
    (and crashing) bug 1563959.
  * With CONDSTORE, eliminate unneeded flag fetches at startup bug
    1428097.
  * Fix so custom tags (keywords) are visible to all users bug 583677.
  * Improve handling of tags on shared folders bug 1596371.
  * Allow setting/resetting junk marking by user for yahoo/aol to
    stick bug 1260059.
  * Don't check subject if spellchecker is not ready bug 1069787.
  * Grammar issues in mailnews_account_settings.xhtml bug 1793291.
  * Remove use of nsIMemory bug 1792578.
  * Replace obsolete GetStringBundleService call in SeaMonkey bug
    1794400.
  * SeaMonkey crashes on MacOS Ventura 13.0 bug 1797696.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Added support for clang 15 and macOS SDK 11.3.
  * Verified compatibility with Rust 1.65.
  * SeaMonkey 2.53.15 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.15 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.6
    and Thunderbird 102.5 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c9 to remove
  obsolete stuff and fix handling of Latam Spanish
- remove build dependency on obsolete rust-std-static
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1207332</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1680264000">- update to SeaMonkey 2.53.16
  * No throbber in plaintext editor bug 85498.
  * Remove unused gridlines class from EdAdvancedEdit bug 1806632.
  * Remove ESR 91 links from debugQA bug 1804534.
  * Rename devtools/shim to devtools/startup bug 1812367.
  * Remove unused seltype=text|cell css bug 1806653.
  * Implement new shared tree styling bug 1807802.
  * Use `win.focus()` in macWindowMenu.js bug 1807817.
  * Remove WCAP provider bug 1579020.
  * Remove ftp/file tree view support bug 1239239.
  * Change calendar list tree to a list bug 1561530.
  * Various other updates to the calendar code.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Verified compatibility with Rust 1.66.1.
  * SeaMonkey 2.53.16 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.16 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.9
    and Thunderbird 102.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c11 to reflect
  changes in the new way of packing langpacks
- remove obsolete patch mozilla-language.patch
- remove obsolete patch seamonkey-spellcheck.patch
- remove --enable-system-hunspell from .mozconfig per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1820413
- add build dependency on clang
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1209994</changelog>
</package>
<package pkgid="b81113612ce0557ca61392d4092c517ebe89029f257170552b7672bda71ecc6e" name="seamonkey-debugsource" arch="i586">
  <version epoch="0" ver="2.53.16" rel="bp154.2.6.2"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1664452800">- update to SeaMonkey 2.53.14
  * Updates to the following DOM HTML element interfaces: Embed,
    Object, Anchor, Area, Button, Frame, Canvas, IFrame, Link, Image,
    MenuItem, TextArea, Source, Select, Option, Script and
    Html. Please test add-ons.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Add ESR 102 links to debugQA bug 1779028.
  * Remove about plugins from help menu bug 1779031.
  * Dead links in cs_nav_prefs_advanced.xhtml [en-US] bug 1783558.
  * Dead links in cs_nav_prefs_advanced.xhtml bug 1786030.
  * Remove obsolete chat services from SeaMonkey address book bug
    1779034.
  * Address Book: "Get Map" button is not shown for home addresses bug
    1779319.
  * Added compatibility for rust 1.63
  * SeaMonkey 2.53.14 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.14 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- add seamonkey-spellcheck.patch to work around a circular dependency
  issue when compiling with GCC 12
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1203916</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1674216000">- update to SeaMonkey 2.53.15
  * Microtasks and promises bug 1193394.
  * Implement queueMicrotask()bug 1480236.
  * Remove old synchronous contentPrefService from the tree bug 886907
    and bug 1392929.
  * Remove remaining uses of 'general.useragent.locale' bug 1410736
    and bug 1410738.
  * Migrate to intl.locale.requested.locale list from
    'general.useragent.locale' bug 1441016.
  * Introduce a pref to store BCP47 locale list bug 1414390, bug
    1423532 and bug 1441026.
  * Remove synchronous certificate verification APIs from
    nsIX509CertDB bug 1453741 and bug 1453778.
  * Taskbar preview's favicon appears blank bug 1475524.
  * Call Imagelibs decodeImageAsyncWindows using a callback bug
    1790695.
  * Remove PermissionsService from process Windows sandboxing code bug
    1788233, bug 1789782 and bug 1794394.
  * Security info dialog doesn't show cert status anymore bug 1293378.
  * Replace nsIPlatfromCharset in mailnews bug 1381762.
  * Replace use of nsMsgI18NFileSystemCharset() with
    NS_CopyUnicodeToNative/NS_CopyNativeToUnicode() bug 1506422.
  * Cater for Outlook's/Hotmail's 'Deleted' folder bug 1320191.
  * Make some filter methods scriptable bug 1497513.
  * Fix crash in nsMsgFilterAfterTheFact::ApplyFilter() caused by
    async reset of 'm_curFolder' bug 537017.
  * Localize messages from nsIMsgFolder.logRuleHitFail() bug 1352731.
  * Add logging of message filter runs and actions bug 697522.
  * Check that we got a non-null header before running a filter on it
    (and crashing) bug 1563959.
  * With CONDSTORE, eliminate unneeded flag fetches at startup bug
    1428097.
  * Fix so custom tags (keywords) are visible to all users bug 583677.
  * Improve handling of tags on shared folders bug 1596371.
  * Allow setting/resetting junk marking by user for yahoo/aol to
    stick bug 1260059.
  * Don't check subject if spellchecker is not ready bug 1069787.
  * Grammar issues in mailnews_account_settings.xhtml bug 1793291.
  * Remove use of nsIMemory bug 1792578.
  * Replace obsolete GetStringBundleService call in SeaMonkey bug
    1794400.
  * SeaMonkey crashes on MacOS Ventura 13.0 bug 1797696.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Added support for clang 15 and macOS SDK 11.3.
  * Verified compatibility with Rust 1.65.
  * SeaMonkey 2.53.15 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.15 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.6
    and Thunderbird 102.5 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c9 to remove
  obsolete stuff and fix handling of Latam Spanish
- remove build dependency on obsolete rust-std-static
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1207332</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1680264000">- update to SeaMonkey 2.53.16
  * No throbber in plaintext editor bug 85498.
  * Remove unused gridlines class from EdAdvancedEdit bug 1806632.
  * Remove ESR 91 links from debugQA bug 1804534.
  * Rename devtools/shim to devtools/startup bug 1812367.
  * Remove unused seltype=text|cell css bug 1806653.
  * Implement new shared tree styling bug 1807802.
  * Use `win.focus()` in macWindowMenu.js bug 1807817.
  * Remove WCAP provider bug 1579020.
  * Remove ftp/file tree view support bug 1239239.
  * Change calendar list tree to a list bug 1561530.
  * Various other updates to the calendar code.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Verified compatibility with Rust 1.66.1.
  * SeaMonkey 2.53.16 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.16 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.9
    and Thunderbird 102.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c11 to reflect
  changes in the new way of packing langpacks
- remove obsolete patch mozilla-language.patch
- remove obsolete patch seamonkey-spellcheck.patch
- remove --enable-system-hunspell from .mozconfig per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1820413
- add build dependency on clang
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1209994</changelog>
</package>
<package pkgid="42559a023a47cdb0510c800a39f135a1be9a100077773c7c833e4aa9809b7313" name="seamonkey-debugsource" arch="x86_64">
  <version epoch="0" ver="2.53.16" rel="bp154.2.6.2"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1621339200">- add patch seamonkey-rustc-bootstrap.patch adapted from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1710154 to enable
  compilation with rust &gt;= 1.50.0</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625659200">- update to SeaMonkey 2.53.8
  * Serious performance improvements and bug fixes tracked in bug
    1633339 and bug 1711050.
  * Language attributes with country codes not recognized when
    building the Website Navigation Bar link toolbar bug 134436 and
    bug 1709443.
  * Optimize SeaMonkey icons for speed and optional higher quality for
    branding bug 1362210 and bug 1699322.
  * Support from= option when opening email compose window from the
    command line bug 1628671.
  * Update subject handling and GenericSendMessage function in compose
    window bug 1693994.
  * All message windows should update when view preferences are
    changed bug 1694765.
  * Improve marking of multiple messages as read / unread bug 1700530.
  * Show version numbers again in the add-on manager by the partial
    backout of bug 1161183.
  * Update available networks in chatZilla (including adding
    libera.chat)bug 1704392 and bug 1712505.
  * Change default port for IRC via TLS/SSL to 6697 bug 1704280.
  * Remove chatZilla and Lightning extension language packs and
    incorpate localisations within the main language pack bug 1604663.
  * Fix address drag and drop handling in compose window bug 1712002
    and bug 1712227.
  * Further fixes for legacy generators and the deprecated for each
    statement in add-ons and the Add-on SDK bug 1702903.
  * For developers, fork DOMi repo into main SeaMonkey one which means
    no need to separately checkout the extension bug 1700003.
  * SeaMonkey 2.53.8 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.11
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete seamonkey-websocketloop.patch and
  seamonkey-rustc-bootstrap.patch (now integrated upstream)</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1664452800">- update to SeaMonkey 2.53.14
  * Updates to the following DOM HTML element interfaces: Embed,
    Object, Anchor, Area, Button, Frame, Canvas, IFrame, Link, Image,
    MenuItem, TextArea, Source, Select, Option, Script and
    Html. Please test add-ons.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Add ESR 102 links to debugQA bug 1779028.
  * Remove about plugins from help menu bug 1779031.
  * Dead links in cs_nav_prefs_advanced.xhtml [en-US] bug 1783558.
  * Dead links in cs_nav_prefs_advanced.xhtml bug 1786030.
  * Remove obsolete chat services from SeaMonkey address book bug
    1779034.
  * Address Book: "Get Map" button is not shown for home addresses bug
    1779319.
  * Added compatibility for rust 1.63
  * SeaMonkey 2.53.14 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.14 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- add seamonkey-spellcheck.patch to work around a circular dependency
  issue when compiling with GCC 12
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1203916</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1674216000">- update to SeaMonkey 2.53.15
  * Microtasks and promises bug 1193394.
  * Implement queueMicrotask()bug 1480236.
  * Remove old synchronous contentPrefService from the tree bug 886907
    and bug 1392929.
  * Remove remaining uses of 'general.useragent.locale' bug 1410736
    and bug 1410738.
  * Migrate to intl.locale.requested.locale list from
    'general.useragent.locale' bug 1441016.
  * Introduce a pref to store BCP47 locale list bug 1414390, bug
    1423532 and bug 1441026.
  * Remove synchronous certificate verification APIs from
    nsIX509CertDB bug 1453741 and bug 1453778.
  * Taskbar preview's favicon appears blank bug 1475524.
  * Call Imagelibs decodeImageAsyncWindows using a callback bug
    1790695.
  * Remove PermissionsService from process Windows sandboxing code bug
    1788233, bug 1789782 and bug 1794394.
  * Security info dialog doesn't show cert status anymore bug 1293378.
  * Replace nsIPlatfromCharset in mailnews bug 1381762.
  * Replace use of nsMsgI18NFileSystemCharset() with
    NS_CopyUnicodeToNative/NS_CopyNativeToUnicode() bug 1506422.
  * Cater for Outlook's/Hotmail's 'Deleted' folder bug 1320191.
  * Make some filter methods scriptable bug 1497513.
  * Fix crash in nsMsgFilterAfterTheFact::ApplyFilter() caused by
    async reset of 'm_curFolder' bug 537017.
  * Localize messages from nsIMsgFolder.logRuleHitFail() bug 1352731.
  * Add logging of message filter runs and actions bug 697522.
  * Check that we got a non-null header before running a filter on it
    (and crashing) bug 1563959.
  * With CONDSTORE, eliminate unneeded flag fetches at startup bug
    1428097.
  * Fix so custom tags (keywords) are visible to all users bug 583677.
  * Improve handling of tags on shared folders bug 1596371.
  * Allow setting/resetting junk marking by user for yahoo/aol to
    stick bug 1260059.
  * Don't check subject if spellchecker is not ready bug 1069787.
  * Grammar issues in mailnews_account_settings.xhtml bug 1793291.
  * Remove use of nsIMemory bug 1792578.
  * Replace obsolete GetStringBundleService call in SeaMonkey bug
    1794400.
  * SeaMonkey crashes on MacOS Ventura 13.0 bug 1797696.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Added support for clang 15 and macOS SDK 11.3.
  * Verified compatibility with Rust 1.65.
  * SeaMonkey 2.53.15 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.15 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.6
    and Thunderbird 102.5 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c9 to remove
  obsolete stuff and fix handling of Latam Spanish
- remove build dependency on obsolete rust-std-static
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1207332</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1680264000">- update to SeaMonkey 2.53.16
  * No throbber in plaintext editor bug 85498.
  * Remove unused gridlines class from EdAdvancedEdit bug 1806632.
  * Remove ESR 91 links from debugQA bug 1804534.
  * Rename devtools/shim to devtools/startup bug 1812367.
  * Remove unused seltype=text|cell css bug 1806653.
  * Implement new shared tree styling bug 1807802.
  * Use `win.focus()` in macWindowMenu.js bug 1807817.
  * Remove WCAP provider bug 1579020.
  * Remove ftp/file tree view support bug 1239239.
  * Change calendar list tree to a list bug 1561530.
  * Various other updates to the calendar code.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Verified compatibility with Rust 1.66.1.
  * SeaMonkey 2.53.16 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.16 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.9
    and Thunderbird 102.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c11 to reflect
  changes in the new way of packing langpacks
- remove obsolete patch mozilla-language.patch
- remove obsolete patch seamonkey-spellcheck.patch
- remove --enable-system-hunspell from .mozconfig per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1820413
- add build dependency on clang
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1209994</changelog>
</package>
<package pkgid="65d3a860fdc831124cafae55b229bdf999601b37049be1ece9136bc920c359f6" name="seamonkey-debugsource" arch="aarch64">
  <version epoch="0" ver="2.53.17.1" rel="bp154.2.11.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1664452800">- update to SeaMonkey 2.53.14
  * Updates to the following DOM HTML element interfaces: Embed,
    Object, Anchor, Area, Button, Frame, Canvas, IFrame, Link, Image,
    MenuItem, TextArea, Source, Select, Option, Script and
    Html. Please test add-ons.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Add ESR 102 links to debugQA bug 1779028.
  * Remove about plugins from help menu bug 1779031.
  * Dead links in cs_nav_prefs_advanced.xhtml [en-US] bug 1783558.
  * Dead links in cs_nav_prefs_advanced.xhtml bug 1786030.
  * Remove obsolete chat services from SeaMonkey address book bug
    1779034.
  * Address Book: "Get Map" button is not shown for home addresses bug
    1779319.
  * Added compatibility for rust 1.63
  * SeaMonkey 2.53.14 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.14 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- add seamonkey-spellcheck.patch to work around a circular dependency
  issue when compiling with GCC 12
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1203916</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1674216000">- update to SeaMonkey 2.53.15
  * Microtasks and promises bug 1193394.
  * Implement queueMicrotask()bug 1480236.
  * Remove old synchronous contentPrefService from the tree bug 886907
    and bug 1392929.
  * Remove remaining uses of 'general.useragent.locale' bug 1410736
    and bug 1410738.
  * Migrate to intl.locale.requested.locale list from
    'general.useragent.locale' bug 1441016.
  * Introduce a pref to store BCP47 locale list bug 1414390, bug
    1423532 and bug 1441026.
  * Remove synchronous certificate verification APIs from
    nsIX509CertDB bug 1453741 and bug 1453778.
  * Taskbar preview's favicon appears blank bug 1475524.
  * Call Imagelibs decodeImageAsyncWindows using a callback bug
    1790695.
  * Remove PermissionsService from process Windows sandboxing code bug
    1788233, bug 1789782 and bug 1794394.
  * Security info dialog doesn't show cert status anymore bug 1293378.
  * Replace nsIPlatfromCharset in mailnews bug 1381762.
  * Replace use of nsMsgI18NFileSystemCharset() with
    NS_CopyUnicodeToNative/NS_CopyNativeToUnicode() bug 1506422.
  * Cater for Outlook's/Hotmail's 'Deleted' folder bug 1320191.
  * Make some filter methods scriptable bug 1497513.
  * Fix crash in nsMsgFilterAfterTheFact::ApplyFilter() caused by
    async reset of 'm_curFolder' bug 537017.
  * Localize messages from nsIMsgFolder.logRuleHitFail() bug 1352731.
  * Add logging of message filter runs and actions bug 697522.
  * Check that we got a non-null header before running a filter on it
    (and crashing) bug 1563959.
  * With CONDSTORE, eliminate unneeded flag fetches at startup bug
    1428097.
  * Fix so custom tags (keywords) are visible to all users bug 583677.
  * Improve handling of tags on shared folders bug 1596371.
  * Allow setting/resetting junk marking by user for yahoo/aol to
    stick bug 1260059.
  * Don't check subject if spellchecker is not ready bug 1069787.
  * Grammar issues in mailnews_account_settings.xhtml bug 1793291.
  * Remove use of nsIMemory bug 1792578.
  * Replace obsolete GetStringBundleService call in SeaMonkey bug
    1794400.
  * SeaMonkey crashes on MacOS Ventura 13.0 bug 1797696.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Added support for clang 15 and macOS SDK 11.3.
  * Verified compatibility with Rust 1.65.
  * SeaMonkey 2.53.15 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.15 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.6
    and Thunderbird 102.5 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c9 to remove
  obsolete stuff and fix handling of Latam Spanish
- remove build dependency on obsolete rust-std-static
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1207332</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1680264000">- update to SeaMonkey 2.53.16
  * No throbber in plaintext editor bug 85498.
  * Remove unused gridlines class from EdAdvancedEdit bug 1806632.
  * Remove ESR 91 links from debugQA bug 1804534.
  * Rename devtools/shim to devtools/startup bug 1812367.
  * Remove unused seltype=text|cell css bug 1806653.
  * Implement new shared tree styling bug 1807802.
  * Use `win.focus()` in macWindowMenu.js bug 1807817.
  * Remove WCAP provider bug 1579020.
  * Remove ftp/file tree view support bug 1239239.
  * Change calendar list tree to a list bug 1561530.
  * Various other updates to the calendar code.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Verified compatibility with Rust 1.66.1.
  * SeaMonkey 2.53.16 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.16 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.9
    and Thunderbird 102.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c11 to reflect
  changes in the new way of packing langpacks
- remove obsolete patch mozilla-language.patch
- remove obsolete patch seamonkey-spellcheck.patch
- remove --enable-system-hunspell from .mozconfig per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1820413
- add build dependency on clang
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1209994</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1691150400">- update to SeaMonkey 2.53.17
  * Fix macOS Contacts permission request bug 1826719.
  * Remove SeaMonkey 2.57 links from debugQA bug 1829683.
  * Treat opening urls from the library as external bug 1619108.
  * Disable spam warning for autogenerated links in plaintext messages
    bug 619031.
  * Switch SeaMonkey build files to Python 3 bug 1635849.
  * Remove empty overlays from Composer bug 1828533.
  * Move xpfe autocomplete to comm-central suite bug 1418512.
  * Remove nsIPrefBranch2 and nsIPrefBranchInternal bug 1374847.
  * SeaMonkey 2.53.17 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.17 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.11
    and Thunderbird 102.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
  * Adapt mozilla-nongnome-proxies.patch for SeaMonkey 2.53.17
  * Adapt seamonkey-lto.patch for SeaMonkey 2.53.17
  * Remove obsolete %clean section from seamonkey.spec
- request inclusion in Leap 15.4 and 15.5:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1213986</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1695297600">- update to SeaMonkey 2.53.17.1
  * Upstream libwebp security fix bug 1852749.
  * CVE-2023-4863: Heap buffer overflow in libwebp bug 1852649.
  * Fix bad string encoded in ansi. l10n fr problem only bug 1847887.
  * SeaMonkey 2.53.17 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.17 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 115.3
    and Thunderbird 115.3 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- request inclusion in Leap 15.4 and 15.5:
  https://bugzilla.opensuse.org/show_bug.cgi?id=</changelog>
</package>
<package pkgid="9da6e3ce4a26c1cce2dd5ba7e7db3f562ab4cc74b17bfb1c0a5d1242b28bcda2" name="seamonkey-debugsource" arch="x86_64">
  <version epoch="0" ver="2.53.17.1" rel="bp154.2.11.1"/>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1625745600">- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188100</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1626955200">- update to SeaMonkey 2.53.8.1
  * Archive message action does not work bug 1718839.
  * Do not preserve offlineMsgSize parameter when moving/copying
    emails between folders bug 1720202 and bug 1430480.
  * Move thread code to threadPane.js and remove messengerdnd.js bug
    515675.
  * SeaMonkey 2.53.8.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.8.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.12
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1188614</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1627387200">- Remove --disable-elf-hack when not available: aarch64 and ppc64*</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629374400">- add upstream patch seamonkey-packed_simd.patch which allows
  packed_simd to compile with Rust 1.54</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1629979200">- update to SeaMonkey 2.53.9
  * There is now an option to clear browser history during shutdown
    bug 1621445.
  * Uninstall plugin command for ChatZilla bug 541719.
  * Update icons used in ChatZilla status bar bug 1710238 and bug
    1710249.
  * Make ChatZilla understand mIRC color code 99 bug 1710298.
  * Implement IRCv3 basic CAP negotiation bug 1717539 and CAP LIST and
    update CAP ACK and CAP LS bug 1710313.
  * Use Unicode instead of images for emojis in ChatZilla bug 1711375
    and add some extra emojis bug 1711376.
  * Use SeaMonkey's configured web search rather than a separate one
    in ChatZilla bug 1712498.
  * Add a networks editor to ChatZilla bug 1716232.
  * Implement IRCv3 away-notify bug 1717543, chghost and
    userhost-in-names bug 1717544, self-messaging bug 1722212 and WHOX
    bug 1722214.
  * Link to SeaMonkey website in debugQA for verification sites and
    development section bug 1685606.
  * Send button should be disable until we have a recipient bug
    104973.
  * Remove need to use a modifier for marking messages as unread bug
    1719216.
  * SeaMonkey 2.53.9 uses the same backend as Firefox and contains the
    relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.13
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- removed obsolete patch seamonkey-packed_simd.patch (integrated
  upstream)
- update seamonkey-lto.patch to work with 2.53.9
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1189845</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1632830400">- update to SeaMonkey 2.53.9.1
  * Fix the lazy loading of images from some websites bug 1727967.
  * Move certain font family defaults from serif to sans serif bug
    1727982.
  * SeaMonkey 2.53.9.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.9.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.14
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1191022</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1637064000">- update to SeaMonkey 2.53.10
  * Minor fixes for testdisplay command in ChatZilla bug 1727976.
  * Show CTCP requests (excluding ACTION and DCC) bug 1722156.
  * IRCv3: Add support for server-time bug 1724586.
  * Add localization note for network editor dialog width in ChatZilla
    bug 1727977.
  * IRCv3: Add support for extended-join and account-notify bug
    1722159.
  * Add ability to collapse message groups in ChatZilla bug 1724588.
  * Fix JS strict warnings in unescapeTagValue in ChatZilla bug
    1727989.
  * IRCv3: Add support for invite-notify bug 1722161.
  * IRCv3: Add support for batch bug 1724589.
  * Fix JS strict warning in addHistory in cZ static.js bug 1727992.
  * IRCv3: Add support for cap-notify bug 1722162.
  * Stop using canonical name as collection keys in ChatZilla bug
    1728025.
  * IRCv3: Add support for TLS and STS bug 1722166.
  * Helper function for renaming irc server properties in ChatZilla
    bug 1728027.
  * IRCv3: Add support for MONITOR bug 1722174.
  * Remove use of msg.commasp in ChatZilla bug 1726965.
  * Allow shiftKey to modify behaviour of link clicking in cZ bug
    1713458.
  * IRCv3: Add support for echo-message bug 1722211.
  * In ChatZilla make /commands return all matches starting with
    pattern bug 1726966.
  * Use SeaMonkey prefs to determine how links behave in cZ bug
    1713467.
  * Allow parameters to be localised in ChatZilla bug 1724105.
  * Add identify command to cZ and hook into password management bug
    1713470.
  * IRCv3.1: Implement SASL with PLAIN mechanism bug 1717545.
  * IRCv3: Add support for message tags bug 1724584.
  * Add last read message divider to ChatZilla bug 1729159.
  * IRCv3: Add support for account-tag bug 1724585.
  * Missing option "text encoding Unicode/UTF-8" in preferences -
    Mailnews bug 1679260.
  * Detect Crashreporter using AppConstants in SeaMonkey bug 1735236.
  * Link about LEGACY extensions in Add-ons Manager is broken bug
    1656797.
  * Update help for clear private data preferences and dialog bug
    1728911.
  * Fix typo in cs_nav_prefs_appearance bug 1737473.
  * Drop leftover "Edit Menu" comment from messageWindow.xul and
    addressbook.xul bug 1725121.
  * Add dummy tab routines to SeaMonkey mailnews tab browser bug
    1735243.
  * Folder pane and tab/window title not updated correctly when
    opening in new tab bug 1726940.
  * Allow mail tab bar to be controlled separately to browser tab bar
    bug 1724515.
  * Copy any user set values for new mail.tabs prefs bug 1729165.
  * Merge Master Passwords and Passwords pref panes into a single pref
    pane bug 1728099.
  * Move warning about redirection pref from Content to Privacy &amp;
    Security pane bug 1728185.
  * Move website icons prefs from content pref pane to browser pref
    pane bug 1727425.
  * Move browser / mailnews system integration prefs into advanced
    pane bug 1727659.
  * Have separate opentabfor.middleclick for mailnews bug 1727948.
  * Add removeBrowser helper for tabbrowser bug 1730391.
  * Put &lt;browser&gt; in a &lt;stack&gt; so it's easy to overlay bug 1730392.
  * Allow browser focus to be avoided bug 1720003.
  * SeaMonkey 32x32 default icon has light stripe at the bottom bug
    1729153.
  * Support &lt;input type=time&gt; and &lt;input type=date&gt; in SeaMonkey bug
    1730408.
  * Middleclick on browser tab handled twice (closes tab and loads URL
    from primary or clipboard) bug 1734407.
  * Unable to create a new "Saved Search Folder" using "Save View as a
    Folder..." bug 1738669.
  * Enable compression for standard http connections bug 1728996.
  * Support VS2022 for compiling under Windows bug 1728988.
  * SeaMonkey 2.53.10 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 78.15
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
- requested inclusion in Leap 15.3 and Leap 15.2:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1192742</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1639396800">- update to SeaMonkey 2.53.10.1
  * Security fix for NSS code bug 1737470.
  * Only use networks and servers in lower case in ChatZilla bug
    1742502.
  * Change classic form icon in SeaMonkey composer bug 1710915.
  * Addition fixes for SeaMonkey 32x32 default icons on Windows and
    macOS bug 1729153.
  * SeaMonkey 2.53.10.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.10.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.4 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
- Remove unused build dependency on libidl-devel.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1193668</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1640692800">- update to SeaMonkey 2.53.10.2
  * Obtain Windows code-signing certificate for SeaMonkey binary and
    update signing bug 1438084.
  * Support SHA-2 hashes in CertIDs in OCSP responses - port of bug
    1746221.
  * Fix rust 1.57 Windows linking for SeaMonkey 2.53 bug 1746785.
  * SeaMonkey 2.53.10.2 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.4.1
    ESR and a few enhancements have been backported. We will continue
    to enhance SeaMonkey security in subsequent 2.53.x beta and
    release versions as fast as we are able to.
  * SeaMonkey 2.53.10.2 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.0 release notes
    for specific changes and security fixes in this release.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1194114</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1644926400">- Drop pkgconfig(gconf-2) BuildRequires and pass ac_add_options
  - -disable-gconf to mozconfig. As we already are using cairo-gtk3,
  gconf support serves no purpose (gio/gsettings takes care).</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1646308800">- update to SeaMonkey 2.53.11
  * Remove obsolete MOZ_EXTENSIONS check in suite bug 1749146.
  * Add connect button to cZ Networks Editor bug 1736443.
  * Remove freenode remnants from ChatZilla in SeaMonkey bug 1741082.
  * Prefer secure over insecure protocol in network list in ChatZilla
    bug 1744440.
  * Composer - Change tag textbox is not removed after use bug
    1755369.
  * Clean up repo links in debugQA bug 1746790.
  * Fix misspelled references to macOS in suite bug 1749144.
  * Remove obsolete references to Java and Flash bug 1749141.
  * Help button not working in delete cert dialog bug 1750386.
  * Rearrange Message Filter Dialog to make room for new features bug
    1735053.
  * Use Insert key as shortcut to create new message filters bug 1735055.
  * Rename some variables used in SeaMonkey's FilterListDialog to
    match Thunderbird's bug 1735056.
  * Implement Copy to New message filter functionality bug 1735057.
  * Add move to top / bottom buttons to message filters bug 1735059.
  * Add preference to not prompt for message filter deletion bug
    1735061.
  * Clean up folder handling in FilterListDialog bug 1736425.
  * Add refresh function to Filter list dialog so that it can be
    updated when already open and new filters are added externally bug
    1737450.
  * Use listbox rather than tree in FilterListDialog bug 1746081.
  * MsgFilterList(args) should take targetFilter and pass it to
    FilterListDialog bug 1753891.
  * Mail&amp;News' start.xhtml: "We" link broken bug 1748178.
  * Add search functionality to filter dialog bug 1749207.
  * Move the taskbar refresh timer in SeaMonkey to idle dispatch bug
    1746788.
  * Prevent subresource loads from showing the progress indicator on
    the tab in SeaMonkey bug 1746787.
  * SeaMonkey 2.53.11 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * Additional important security fixes up to Current Firefox 91.6 ESR
    and a few enhancements have been backported. We will continue to
    enhance SeaMonkey security in subsequent 2.53.x beta and release
    versions as fast as we are able to.
  * SeaMonkey 2.53.11 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.0 release notes for
    specific changes and security fixes in this release.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.11
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1196703</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1648209600">- update to SeaMonkey 2.53.11.1
  * Fix edge case when setting IntersectionObserver threshold bug
    1758291.
  * OAuth2 prefs should use realuserName instead of username bug
    1518126.
  * SeaMonkey 2.53.11.1 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.11.1 shares most parts of the mail and news code
    with Thunderbird. Please read the Thunderbird 60.8.0 release notes
    for specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.7 and
    Thunderbird 91.7 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1197518</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1651665600">- update to SeaMonkey 2.53.12
  * Format Toolbar forgets its hidden status when switching to other
    view modes bug 1719020.
  * Remove obsolete plugin code from SeaMonkey bug 1762733.
  * Fix a few strict warnings in SeaMonkey bug 1755553.
  * Remove Run Flash from Site permissions and page info bug 1758289.
  * Use fixIterator and replace use of removeItemAt in
    FilterListDialog bug 1756359.
  * Remove RDF usage in tabmail.js bug 1758282.
  * Implement 'Edit Template' and 'New Message From Template' commands
    and UI bug 1759376.
  * [SM] Implement 'Edit Draft' command and hide it when not in a
    draft folder (port Thunderbird bug 1106412) bug 1256716.
  * Messages in Template folder need "Edit Template" button in header
    (like for Drafts) bug 80280.
  * Refactor and simplify the feed Subscribe dialog options updates
    bug 1420473.
  * Add system memory and disk size and placeDB page limit to
    about:support bug 1753729.
  * Remove warning about missing plugins in SeaMonkey 2.53 and 2.57
    bug 1755558.
  * SeaMonkey 2.53.12 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.12 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.9 and
    Thunderbird 91.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- remove/update references to obsolete gtk2 directory
- requested inclusion in Leap 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1199197</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1655208000">- Add --disable-elf-hack for aarch64 to fix build</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1657540800">- update to SeaMonkey 2.53.13
  * Updates to devtools.
  * Updates to build configuration.
  * Starting the switch from Python 2 to Python 3 in the build system.
  * Removal of array comprehensions, legacy iterators and generators
    bug 1414340 and bug 1098412.
  * Adding initial optional chaining and Promise.allSettled() support.
  * SeaMonkey 2.53.13 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.13 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- adapt seamonkey-man-page.patch for SeaMonkey 2.53.13
- disable LTO for Tumbleweed builds due to linker errors
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1201406</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1664452800">- update to SeaMonkey 2.53.14
  * Updates to the following DOM HTML element interfaces: Embed,
    Object, Anchor, Area, Button, Frame, Canvas, IFrame, Link, Image,
    MenuItem, TextArea, Source, Select, Option, Script and
    Html. Please test add-ons.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Add ESR 102 links to debugQA bug 1779028.
  * Remove about plugins from help menu bug 1779031.
  * Dead links in cs_nav_prefs_advanced.xhtml [en-US] bug 1783558.
  * Dead links in cs_nav_prefs_advanced.xhtml bug 1786030.
  * Remove obsolete chat services from SeaMonkey address book bug
    1779034.
  * Address Book: "Get Map" button is not shown for home addresses bug
    1779319.
  * Added compatibility for rust 1.63
  * SeaMonkey 2.53.14 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.14 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 91.11
    and Thunderbird 91.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- add seamonkey-spellcheck.patch to work around a circular dependency
  issue when compiling with GCC 12
- requested inclusion in Leap 15.4 and 15.3:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1203916</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1674216000">- update to SeaMonkey 2.53.15
  * Microtasks and promises bug 1193394.
  * Implement queueMicrotask()bug 1480236.
  * Remove old synchronous contentPrefService from the tree bug 886907
    and bug 1392929.
  * Remove remaining uses of 'general.useragent.locale' bug 1410736
    and bug 1410738.
  * Migrate to intl.locale.requested.locale list from
    'general.useragent.locale' bug 1441016.
  * Introduce a pref to store BCP47 locale list bug 1414390, bug
    1423532 and bug 1441026.
  * Remove synchronous certificate verification APIs from
    nsIX509CertDB bug 1453741 and bug 1453778.
  * Taskbar preview's favicon appears blank bug 1475524.
  * Call Imagelibs decodeImageAsyncWindows using a callback bug
    1790695.
  * Remove PermissionsService from process Windows sandboxing code bug
    1788233, bug 1789782 and bug 1794394.
  * Security info dialog doesn't show cert status anymore bug 1293378.
  * Replace nsIPlatfromCharset in mailnews bug 1381762.
  * Replace use of nsMsgI18NFileSystemCharset() with
    NS_CopyUnicodeToNative/NS_CopyNativeToUnicode() bug 1506422.
  * Cater for Outlook's/Hotmail's 'Deleted' folder bug 1320191.
  * Make some filter methods scriptable bug 1497513.
  * Fix crash in nsMsgFilterAfterTheFact::ApplyFilter() caused by
    async reset of 'm_curFolder' bug 537017.
  * Localize messages from nsIMsgFolder.logRuleHitFail() bug 1352731.
  * Add logging of message filter runs and actions bug 697522.
  * Check that we got a non-null header before running a filter on it
    (and crashing) bug 1563959.
  * With CONDSTORE, eliminate unneeded flag fetches at startup bug
    1428097.
  * Fix so custom tags (keywords) are visible to all users bug 583677.
  * Improve handling of tags on shared folders bug 1596371.
  * Allow setting/resetting junk marking by user for yahoo/aol to
    stick bug 1260059.
  * Don't check subject if spellchecker is not ready bug 1069787.
  * Grammar issues in mailnews_account_settings.xhtml bug 1793291.
  * Remove use of nsIMemory bug 1792578.
  * Replace obsolete GetStringBundleService call in SeaMonkey bug
    1794400.
  * SeaMonkey crashes on MacOS Ventura 13.0 bug 1797696.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Added support for clang 15 and macOS SDK 11.3.
  * Verified compatibility with Rust 1.65.
  * SeaMonkey 2.53.15 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.15 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.6
    and Thunderbird 102.5 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c9 to remove
  obsolete stuff and fix handling of Latam Spanish
- remove build dependency on obsolete rust-std-static
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1207332</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1680264000">- update to SeaMonkey 2.53.16
  * No throbber in plaintext editor bug 85498.
  * Remove unused gridlines class from EdAdvancedEdit bug 1806632.
  * Remove ESR 91 links from debugQA bug 1804534.
  * Rename devtools/shim to devtools/startup bug 1812367.
  * Remove unused seltype=text|cell css bug 1806653.
  * Implement new shared tree styling bug 1807802.
  * Use `win.focus()` in macWindowMenu.js bug 1807817.
  * Remove WCAP provider bug 1579020.
  * Remove ftp/file tree view support bug 1239239.
  * Change calendar list tree to a list bug 1561530.
  * Various other updates to the calendar code.
  * Continue the switch from Python 2 to Python 3 in the build system.
  * Verified compatibility with Rust 1.66.1.
  * SeaMonkey 2.53.16 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.16 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.9
    and Thunderbird 102.9 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- update seamonkey-GNUmakefile patch per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1692516#c11 to reflect
  changes in the new way of packing langpacks
- remove obsolete patch mozilla-language.patch
- remove obsolete patch seamonkey-spellcheck.patch
- remove --enable-system-hunspell from .mozconfig per
  https://bugzilla.mozilla.org/show_bug.cgi?id=1820413
- add build dependency on clang
- request inclusion in Leap 15.4:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1209994</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1691150400">- update to SeaMonkey 2.53.17
  * Fix macOS Contacts permission request bug 1826719.
  * Remove SeaMonkey 2.57 links from debugQA bug 1829683.
  * Treat opening urls from the library as external bug 1619108.
  * Disable spam warning for autogenerated links in plaintext messages
    bug 619031.
  * Switch SeaMonkey build files to Python 3 bug 1635849.
  * Remove empty overlays from Composer bug 1828533.
  * Move xpfe autocomplete to comm-central suite bug 1418512.
  * Remove nsIPrefBranch2 and nsIPrefBranchInternal bug 1374847.
  * SeaMonkey 2.53.17 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.17 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 102.11
    and Thunderbird 102.11 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
  * Adapt mozilla-nongnome-proxies.patch for SeaMonkey 2.53.17
  * Adapt seamonkey-lto.patch for SeaMonkey 2.53.17
  * Remove obsolete %clean section from seamonkey.spec
- request inclusion in Leap 15.4 and 15.5:
  https://bugzilla.opensuse.org/show_bug.cgi?id=1213986</changelog>
  <changelog author="Tristan Miller &lt;psychonaut@nothingisreal.com&gt;" date="1695297600">- update to SeaMonkey 2.53.17.1
  * Upstream libwebp security fix bug 1852749.
  * CVE-2023-4863: Heap buffer overflow in libwebp bug 1852649.
  * Fix bad string encoded in ansi. l10n fr problem only bug 1847887.
  * SeaMonkey 2.53.17 uses the same backend as Firefox and contains
    the relevant Firefox 60.8 security fixes.
  * SeaMonkey 2.53.17 shares most parts of the mail and news code with
    Thunderbird. Please read the Thunderbird 60.8.0 release notes for
    specific security fixes in this release.
  * Additional important security fixes up to Current Firefox 115.3
    and Thunderbird 115.3 ESR plus many enhancements have been
    backported. We will continue to enhance SeaMonkey security in
    subsequent 2.53.x beta and release versions as fast as we are able
    to.
- request inclusion in Leap 15.4 and 15.5:
  https://bugzilla.opensuse.org/show_bug.cgi?id=</changelog>
</package>
<package pkgid="1e5f013ae3c83fe838d7e53eaf42b9eac2aa68de6cec4beb354a3d3aaf4318f5" name="tor-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="429065045db31901191cb3f8551a420690445d247700210a32a9904c8f49c51c" name="tor-debuginfo" arch="i586">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="f581af585a9cb58aa275c67e91f78e33abe91beafd9c8952c010f19f50687511" name="tor-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="eede5a1296731753d6d2a7bf5cf0bc9684aa8fd03afe2146a11d36fa6e18c48e" name="tor-debuginfo" arch="s390x">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="dc5b5c67dfee41b476ce0eb5b76d95fba49bb3c8f5962bb82733eb50677a3771" name="tor-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="55c829ec8044051570c89ab1af02dc9eb3276420682d48fa11456a9d20a01a22" name="tor-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="ebd52ef35e7b40611e79265ee0b277831fa6d83cb953c3906515ba58fe80f845" name="tor-debuginfo" arch="i586">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="73c9fc4b7b8ab3a67e01845bdc5c483c7ddc3741003704eed05b2854a7fa9993" name="tor-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="a064b36eb3cdad5e19e9ea903d9b984960a93920782a4d099f16c06d3bf8552a" name="tor-debuginfo" arch="s390x">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="dc3435d3bec7710059f3eff416e4f7f62455267bd2f3475947b371db2929b9dc" name="tor-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="d2f8ed79d2a2832a06dc1331be6818e166abb8001f7da97cf1297a410248339b" name="tor-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="7fe96a3575ff7394df76da3f981cd46d6b96f61d7872c9c972dbd6f0e7edf463" name="tor-debuginfo" arch="i586">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="cbc6b06d90f37ba129cd9c58b7f081fe42a699aba416b7e39200460db73c39b9" name="tor-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="116c01b889574eb3f03a2670b3c22e8d1ac4c5b8634aacac04d75d998e7f7a1c" name="tor-debuginfo" arch="s390x">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="629492e24bff4f099695ac9841b3e006147c92e3141dedb2723fd7d0a2dff75c" name="tor-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="d3afb06937689919e4f52e7ed61ace5b1ae83c5640de98cea979bf20272def8e" name="tor-debugsource" arch="aarch64">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="5724b6e5fad872b152622f64b33b363aa5c28ec13bbca0b5a9839379b22f9835" name="tor-debugsource" arch="i586">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="bd16fe7ab048f41504ae9cd838144ef97ef0394986c1ba60cd3c64d8f7a1b348" name="tor-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="07cb8b581fc6d7a5a264597554bfd1c61ca48c52af2662b9379dd883d42bb82b" name="tor-debugsource" arch="s390x">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="d9c43285100462fd769a68581d075911ffdefb9ca0b2224899c35dea308a83de" name="tor-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.7.10" rel="bp154.2.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
</package>
<package pkgid="9b2e9bdc4175a9d46b25d370bd9d0b84664c2496986f2656d032caad2fe5c572" name="tor-debugsource" arch="aarch64">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="e083d26a95db5f9d07bbbacbed234090c9ca9dae7a6d59c1b3f4f4695837ad2e" name="tor-debugsource" arch="i586">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="22e76c2207b9696a1e92c8a71ad6610e30744bbffca16bd43782611a17a82b5e" name="tor-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="c04e40c62f2fc79aff54578358f37c9eaec75983d5b46d175ac7accbc5a6294c" name="tor-debugsource" arch="s390x">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="405a269912824596c52ad78b9d4da010cb09d2b9c82fe873d6397a63b3e0a4cf" name="tor-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.7.11" rel="bp154.2.9.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660219200">- tor 0.4.7.9 (boo#1202336)
  * major fixes aimed at reducing memory pressure on relays
  * prevent a possible side-channel
  * major bugfix related to congestion control
  * major bugfix related to Vanguard L2 layer node selection</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1660305600">- tor 0.4.7.10
  * IPFire location database did not have proper ARIN network
    allocations - affected circuit path selection and relay metrics</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1668081600">- tor 0.4.7.11:
  * Improve security of DNS cache by randomly clipping the TTL
    value (boo#1205307, TROVE-2021-009)
  * Improved defenses against network-wide DoS, multiple counters
    and metrics added to MetricsPorts
  * Apply circuit creation anti-DoS defenses if the outbound
    circuit max cell queue size is reached too many times. This
    introduces two new consensus parameters to control the queue
    size limit and number of times allowed to go over that limit.
  * Directory authority updates
  * IPFire database and geoip updates
  * Bump the maximum amount of CPU that can be used from 16 to 128.
    The NumCPUs torrc option overrides this hardcoded maximum.
  * onion service: set a higher circuit build timeout for opened
    client rendezvous circuit to avoid timeouts and retry load
  * Make the service retry a rendezvous if the circuit is being
    repurposed for measurements</changelog>
</package>
<package pkgid="5c35e35eabf1ba1be6272e4ab4990aee71d133228e6267866ca286dd14ff4767" name="tor-debugsource" arch="aarch64">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="15fa3c48feea865342e3cede1ece65151edbbe94f31b06b74bbb82b059b41308" name="tor-debugsource" arch="i586">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="91ed6eb487967f67920566814bfa1df2bb7baa07901c310dcc94d9bf3690d371" name="tor-debugsource" arch="ppc64le">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="39156dda556a01475594e0b2854f7ffb262c7dd631acdebd256fa952709703a2" name="tor-debugsource" arch="s390x">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="d0ecd159202597e89263ce13d5596dcdba3f325f11be3334952f56b0f80a1633" name="tor-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.7.8" rel="bp154.2.3.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1600171200">- tor 0.4.4.5
  * Improve guard selection
  * IPv6 improvements</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1605182400">- tor 0.4.4.6
  * Check channels+circuits on relays more thoroughly
    (TROVE-2020-005, boo#1178741)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1611748800">- Restrict service permissions with systemd</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1612526400">- tor 0.4.4.7
  * https://blog.torproject.org/node/1990
  * Stop requiring a live consensus for v3 clients and services
  * Re-entry into the network is now denied at the Exit level
  * Fix undefined behavior on our Keccak library
  * Strip '\r' characters when reading text files on Unix platforms
  * Handle partial SOCKS5 messages correctly
- Add tor-practracker.patch to fix tests</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1613476800">- tor 0.4.5.6
  * https://lists.torproject.org/pipermail/tor-announce/2021-February/000214.html
  * Introduce a new MetricsPort HTTP interface
  * Support IPv6 in the torrc Address option
  * Add event-tracing library support for USDT and LTTng-UST
  * Try to read N of N bytes on a TLS connection
- Drop upstream tor-practracker.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1615896000">- tor 0.4.5.7
  * https://lists.torproject.org/pipermail/tor-announce/2021-March/000216.html
  * Fix 2 denial of service security issues (boo#1183726)
    + Disable the dump_desc() function that we used to dump unparseable
    information to disk (CVE-2021-28089)
    + Fix a bug in appending detached signatures to a pending consensus
    document that could be used to crash a directory authority
    (CVE-2021-28090)
  * Ship geoip files based on the IPFire Location Database</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619179200">- Fix logging issue due to systemd picking up stdout - boo#1181244
  Continue to log notices to syslog by default.
- actually build with lzma/zstd
- skip i586 tests (boo#1179331)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619265600">- fix packaging warnings related to tor-master service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1620734400">- tor 0.4.5.8
  * https://lists.torproject.org/pipermail/tor-announce/2021-May/000219.html
  * allow Linux sandbox with Glibc 2.33
  * work with autoconf 2.70+
  * several other minor features and bugfixes (see announcement)</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1623672000">- tor 0.4.5.9
  * Don't allow relays to spoof RELAY_END or RELAY_RESOLVED cell (CVE-2021-34548, boo#1187322)
  * Detect more failure conditions from the OpenSSL RNG code (boo#1187323)
  * Resist a hashtable-based CPU denial-of-service attack against relays (CVE-2021-34549, boo#1187324)
  * Fix an out-of-bounds memory access in v3 onion service descriptor parsing (CVE-2021-34550, boo#1187325)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1623844800">- tor 0.4.6.5
  * Add controller support for creating v3 onion services with
    client auth
  * When voting on a relay with a Sybil-like appearance, add the
    Sybil flag when clearing out the other flags. This lets a relay
    operator know why their relay hasn't been included in the
    consensus
  * Relays now report how overloaded they are
  * Add a new DoS subsystem to control the rate of client
    connections for relays
  * Relays now publish statistics about v3 onions services
  * Improve circuit timeout algorithm for client performance
- add tor-0.4.6.5-gcc7.patch to fix build with gcc7</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1625140800">- tor 0.4.6.6:
  * Fix a compilation error with gcc 7, drop tor-0.4.6.5-gcc7.patch
  * Enable the deterministic RNG for unit tests that covers the
    address set bloomfilter-based API's</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1625572800">- Add missing service_add_pre tor-master.service</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1629201600">- tor 0.4.6.7:
  * Fix a DoS via a remotely triggerable assertion failure
    (boo#1189489, TROVE-2021-007, CVE-2021-38385)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1629806400">- Reduce boilerplate generated by %service_*.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1636804800">- tor 0.4.6.8:
  * Improving reporting of general overload state for DNS timeout
    errors by relays
  * Regenerate fallback directories for October 2021
  * Bug fixes for onion services
  * CVE-2021-22929: do not log v2 onion services access attempt
    warnings on disk excessively (TROVE-2021-008, boo#1192658)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1639742400">- tor 0.4.6.9:
  * remove the DNS timeout metric from the overload general signal
  * regenerate fallback directories generated on December 15, 2021
  * Update the geoip files to match the IPFire Location Database,
    as retrieved on 2021/12/15
  * Reject IPv6-only DirPort</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1644148800">- tor 0.4.6.10
  * minor bugfixes and features
  * https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.6/ReleaseNotes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1651060800">- tor 0.4.7.7
  * New feature: Congestion control to improve traffic speed and
    stability on the network once a majority of Exit nodes upgrade
    boo#1198949
  * Directory authorities: improved handling of "MiddleOnly" relays
  * Improved mitigation against guard discovery attacks on clients
    and short-lived services
  * Improve observed performance under DNS load
  * Improve handling of overload state
  * end-of-life relays running version 0.4.2.x, 0.4.3.x,
    0.4.4.x and 0.4.5 alphas/rc, 0.3.5.x are now rejected
  * Onion service v2 addresses are no longer recognized</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1655380800">- tor 0.4.7.8
  * Fix a scenario where RTT estimation can become wedged, seriously
    degrading congestion control performance on all circuits. This
    impacts clients, onion services, and relays, and can be triggered
    remotely by a malicious endpoint.
    (TROVE-2022-001, CVE-2022-33903, boo#1200672)
  * Regenerate fallback directories generated on June 17, 2022.
  * Update the geoip files to match the IPFire Location Database, as
    retrieved on 2022/06/17.
  * Allow the rseq system call in the sandbox
  * logging bug fixes</changelog>
</package>
<package pkgid="6f2c5bd75c6150d87b9735fd3ea9cc2e2c8b2ca95db4458dca4227f020d418f1" name="upx-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.0.2" rel="bp154.4.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675080000">- Update to release 4.0.2
  * Fix unpack of ELF x86-64 that failed with
    "CantUnpackException: corrupt b_info"
  * Resolve SEGV on PackLinuxElf64::invert_pt_dynamic
- Delete upx-endiantests.patch (conflict upstream)
- Delete 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  (merged)</changelog>
</package>
<package pkgid="7fa66caf65751faba995779df074a63cb94b29ffd956f2e1a7fe12c2a6591970" name="upx-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.2" rel="bp154.4.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675080000">- Update to release 4.0.2
  * Fix unpack of ELF x86-64 that failed with
    "CantUnpackException: corrupt b_info"
  * Resolve SEGV on PackLinuxElf64::invert_pt_dynamic
- Delete upx-endiantests.patch (conflict upstream)
- Delete 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  (merged)</changelog>
</package>
<package pkgid="20f495f96805e87daeadc05eeb136938dbadfa79f0403e1872bd7287d42a57ee" name="upx-debuginfo" arch="s390x">
  <version epoch="0" ver="4.0.2" rel="bp154.4.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675080000">- Update to release 4.0.2
  * Fix unpack of ELF x86-64 that failed with
    "CantUnpackException: corrupt b_info"
  * Resolve SEGV on PackLinuxElf64::invert_pt_dynamic
- Delete upx-endiantests.patch (conflict upstream)
- Delete 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  (merged)</changelog>
</package>
<package pkgid="7a04b0561fa2e2d85835f03f253f7bbef39ba49023e504f61bf1a36dc3551dd8" name="upx-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="bp154.4.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675080000">- Update to release 4.0.2
  * Fix unpack of ELF x86-64 that failed with
    "CantUnpackException: corrupt b_info"
  * Resolve SEGV on PackLinuxElf64::invert_pt_dynamic
- Delete upx-endiantests.patch (conflict upstream)
- Delete 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  (merged)</changelog>
</package>
<package pkgid="c235101d93f58d4b63bef641e6e1afc1ccf2148eebe8a8a8d19ec2c939797d03" name="upx-debugsource" arch="aarch64">
  <version epoch="0" ver="4.0.2" rel="bp154.4.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675080000">- Update to release 4.0.2
  * Fix unpack of ELF x86-64 that failed with
    "CantUnpackException: corrupt b_info"
  * Resolve SEGV on PackLinuxElf64::invert_pt_dynamic
- Delete upx-endiantests.patch (conflict upstream)
- Delete 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  (merged)</changelog>
</package>
<package pkgid="1562991ef7d3d9cb2242a93a46f68f1fec5d3ac8ba594a4507838cf96dd85850" name="upx-debugsource" arch="ppc64le">
  <version epoch="0" ver="4.0.2" rel="bp154.4.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675080000">- Update to release 4.0.2
  * Fix unpack of ELF x86-64 that failed with
    "CantUnpackException: corrupt b_info"
  * Resolve SEGV on PackLinuxElf64::invert_pt_dynamic
- Delete upx-endiantests.patch (conflict upstream)
- Delete 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  (merged)</changelog>
</package>
<package pkgid="70de86cb0d939fc13569f9ea5c337f39ff34fd66ca640d573b5afee3b729703b" name="upx-debugsource" arch="s390x">
  <version epoch="0" ver="4.0.2" rel="bp154.4.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675080000">- Update to release 4.0.2
  * Fix unpack of ELF x86-64 that failed with
    "CantUnpackException: corrupt b_info"
  * Resolve SEGV on PackLinuxElf64::invert_pt_dynamic
- Delete upx-endiantests.patch (conflict upstream)
- Delete 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  (merged)</changelog>
</package>
<package pkgid="f606b5de45c7c667b712a3ad0d8b266039f499af7a1f35180772782c50bd9628" name="upx-debugsource" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="bp154.4.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- upx-endiantests.patch and lzma-x-endian.patch Correct
  endianness tests by only considering what the compiler says
  about target system and not a hardcoded architecture list.
  (drop upx-3.03_ia64-endianity.patch)
- build with hidden visibility.</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Update to new upstream release 3.94
  * Add support for arm64-linux (aka aarch64).
  * Add support for --lzma compression on 64-bit PowerPC.
  * From 3.92:
  * Explicitly diagnose Go-language bad PT_LOAD.
- Resolve apply/merge conflict of upx-endiantests.patch
- Add 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch [boo#1062059]</changelog>
  <changelog author="jengelh@inai.de" date="1511006400">- Add 0001-Mach-o-defend-against-bad-crafted-input.patch
  [CVE-2017-16869] [boo#1068681]</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1540728000">- Update to version 3.95
  * Flag --force-pie when ET_DYN main program is not marked as
    DF_1_PIE
  * Better compatibility with varying layout of address space on
    Linux
  * Support for 4 PT_LOAD layout in ELF generated by binutils-2.31
  * bug fixes, particularly better diagnosis of malformed input
  * bug fixes - see https://github.com/upx/upx/milestone/4
- Dropped 0001-Protect-against-bad-crafted-input.patch,
  0002-Protect-against-bad-crafted-input.patch and
  0001-Mach-o-defend-against-bad-crafted-input.patch (merged
  upstream)
- Drop lzma922.tar.bz2 (which wasn't being used in the first
  place) and lzma-x-endian.patch which no longer applies to
  the integrated lzma-sdk. The in-tree lzma-sdk is actually a fork
  from an older version but recommended by the author, see
  src/stub/src/c/Makevars.lzma
- Spec cleanup</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1540900800">- Trim bias from description.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579780800">- Update to version 3.96
  * Bug fixes:
    [CVE-2019-1010048, boo#1141777]
    [CVE-2019-14296, boo#1143839]
    [CVE-2019-20021, boo#1159833]
    [CVE-2019-20053, boo#1159920]
    [CVE-2018-11243 partially - ticket 206 ONLY, boo#1094138]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1621425600">- Add 0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch
  [CVE-2020-24119] [boo#1186238]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1622548800">- Add upstream change to fix build with GCC 11:
  * 0001-Silence-yet-some-more-compilation-warnings.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1667044800">- Update to release 4.0
  * Add support for EFI files
- Delete 0001-Silence-yet-some-more-compilation-warnings.patch,
  0001-Unpack-Phdrs-must-be-within-expansion-of-first-compr.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1668600000">- Update to release 4.0.1
  * Fix crash when a linux/armeb LZMA-packed binary unpacks itself.
  * Resolve "CantPackException: bad ElfXX_Shdrs" with
    staticly-linked programs.
  * Resolve "CantPackException: need DT_INIT;..." when attempting
    to re-compress an already packed binary.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1673784000">- Add 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  [boo#1207122] [CVE-2023-23457]</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1675080000">- Update to release 4.0.2
  * Fix unpack of ELF x86-64 that failed with
    "CantUnpackException: corrupt b_info"
  * Resolve SEGV on PackLinuxElf64::invert_pt_dynamic
- Delete upx-endiantests.patch (conflict upstream)
- Delete 0001-invert_pt_dynamic-fix-thinko-PackLinuxElf64help1-ins.patch
  (merged)</changelog>
</package>
<package pkgid="5842fd47eef953422430458fa5115965aa1598210db0b23e12f0f687baf91e03" name="xembedsniproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="3839b8ad6cc7052963945dfeee2a79f5e66685edfae6231c51caf50620d3131a" name="xembedsniproxy-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
<package pkgid="42d859d2adf9faec0470fbfd37ddaaf9aa516db2f21b8201472c5467a4067edd" name="xembedsniproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.24.4" rel="bp154.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632312000">- Add patches from Plasma/5.23 branch:
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
- Add patch to fix XEmbed context menus (kde#442758)
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1632484800">- Add patch to fix build with gpsd:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
- Add patch to fix window thumbnails if dmabuf is not supported (kde#428284):
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1633608000">- Update to 5.23.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.0
- Changes since 5.22.90:
  * Revert "xembed: adapt to changes in KNotifications" (kde#442758)
  * sddm-theme: Fix using mouse movements to show the UI
  * [systemtray] Check for menuItemFactory.object existence (kde#443377)
  * applets/devicenotifier: Remove applet list item animations
  * sddm-theme: Fix use of needsPassword and related button layout
  * [klipper] Fix shortcut of OK button in the clipboard content edit dialog (kde#400623)
  * Fix Kickoff context menu actions for System Settings results (kde#442522)
  * klipper: Fix reading from plasma on wayland
  * Fix build with gpsd 3.23.1
  * Unbreak fontinst KCM (kde#442748)
  * Address regression in VT switching code (kde#442852)
  * libtaskmanager: Don't request dmabuf if not supported (kde#428284)
  * Port away from Kirigami.Units.devicePixelRatio
  * lookandfeel: don't nuke accent colour (kde#442812)
  * kcm/colors: Improve some bindings on accent colors
  * sddm-theme: fix default username font size
  * PipeWire: Include defines for older PipeWire versions
  * pipewire: Properly compare pipewire versions using QVersionNumber
  * [Klipper] Guard against broken data fetches
  * [Klipper] Handle incoming UTF-8 mime types (kde#424694)
  * PipeWire: Make sure thumbnails properly use dmabuf again
  * [shell/panel] Fix ability to type in textfield (kde#442557)
- Drop patches, now upstream:
  * 0001-Fix-build-with-gpsd-3.23.1.patch
  * 0001-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0002-libtaskmanager-Don-t-request-dmabuf-if-not-supported.patch
  * 0002-shell-panel-Fix-ability-to-type-in-textfield.patch
  * 0003-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0004-PipeWire-Make-sure-thumbnails-properly-use-dmabuf-ag.patch
  * 0005-SVN_SILENT-made-messages-.desktop-file-always-resolv.patch
  * 0006-Klipper-Handle-incoming-UTF-8-mime-types.patch
  * 0007-Klipper-Guard-against-broken-data-fetches.patch
  * 0008-pipewire-Properly-compare-pipewire-versions-using-QV.patch
  * 0009-PipeWire-Include-defines-for-older-PipeWire-versions.patch
  * 0010-sddm-theme-fix-default-username-font-size.patch
  * 0011-Revert-xembed-adapt-to-changes-in-KNotifications.patch
- Refresh 0001-Ignore-default-sddm-face-icons.patch
- Add new key + signature to plasma.keyring</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634299200">- Add patch to show password input on the "Other" page in SDDM (kde#443737):
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634644800">- Update to 5.23.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.1
- Changes since 5.23.0:
  * [freespacenotifier] impr: no notification for ro filesystems
  * kcms/colors: Don't apply header accent colors to non-Header color schemes (kde#443786)
  * [kcms/colors] Notify global settings change after saving
  * krdb: Fix removal of Xft.dpi from Xresources (kde#350039)
  * sddm-theme: fix missing password field on "Other" page (kde#443737)
  * pipewire: Report DRM_FORMAT_MOD_INVALID when no modifiers are offered
  * [digital-clock] Do not assign undefined when agenda is not visible (kde#443380)
- Drop patches, now upstream:
  * 0001-sddm-theme-fix-missing-password-field-on-Other-page.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1634817600">- Add back X11 root window properties until firefox is adjusted
  (boo#1191825):
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1635249600">- Update to 5.23.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.2
- Changes since 5.23.1:
  * Hide KRunner window when pressing escape (kde#444240)
  * [applets/clipboard] Fix selecting clipboard entries with Enter
  * Set Qt.ImhNoPredictiveText for text fields that act as search fields
  * [shell] Ignore placeholder screens
- Add a version to BuildRequires: cmake(Breeze)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1636459200">- Update to 5.23.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.3
- Changes since 5.23.2:
  * fixed size hints to the osd
  * use implicit size to not cause binding loops (kde#422072)
  * wayland: don't create DesktopView for placeholder screen (kde#438839,kde#444801)
  * [startplasma] Detect systemd service in linked state
  * [Notifications] Fix grouping container side line
  * Disconnect watcher for xdgActivationTokenArrived (kde#444385)
  * interactiveconsole: Allow specifying mode from command line parameter</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1638273600">- Update to 5.23.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.4
- Changes since 5.23.3:
  * Lock &amp; login screens: Use RTL-friendly arrows when in RTL mode
  * [logout-greeter] Set window class name (kde#444898,kde#444899)
  * systemtray: Connect to StatusNotifierWatcher before initializing QDBusPendingReply
  * systemtray: Check if a service is already added before processing QDBusReply (kde#443961)
  * baloosearchruner: Emit DBus error when baloo is disabled (kde#445342)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1641297600">- Update to 5.23.5
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.5
- Changes since 5.23.4:
  * applets/systemtray: Follow panel opacity (kde#439025)
  * [webshortcutsrunner] Fix private browsing with some Firefoxes
  * [kcms/style] Don't call setNeedsSave when style config changes (kde#439297)
  * digital-clock: fix calendar popup contrast when opened from desktop (kde#446991)
  * [libnotificationmanager] Fix memory leak
  * [kcms/lookandfeel] Guard reading invalid first entry (kde#446100)
  * [Global Menu] Set translation domain
  * lookandfeel: Add missing check if list of files is empty (kde#439797)
  * [KSplash] Start with zero opacity
  * Fix Klipper Actions content truncation (kde#444365)
  * [klipper] Use full text for DBus return values (kde#446441)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642075200">- Update to 5.23.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.23.90
- Too many changes to list here
- Rebase 0001-Use-qdbus-qt5.patch
- Replace xprop-kde-full-session.desktop with autostart file:
  * 0001-Revert-Drop-setupX11-from-startplasma-waylandsession.patch
  * 0002-Revert-Drop-X11-root-properties-for-KDE-full-session.patch
- Add patch to fix the upstream sddm theme background:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
- Add patch to fix screen sharing dialog (kde#448423):
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1642852800">- Add patch to fix initial focus in SDDM (kde#447817):
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
- Add patch to fix initial focus in the lockscreen:
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644062400">- Update to 5.24.0
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.0
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-sddm-theme-Change-wallpaper-extension-so-that-it-poi.patch
  * 0001-systemdialogs-Remove-leftover-and-broken-components.patch
  * 0001-Make-SessionManagementScreen-a-FocusScope.patch
  * 0001-Fix-initial-focus-in-LockScreenUi.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1644926400">- Update to 5.24.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.1
- Changes since 5.24.0:
  * Move to runtime check of valid font DPI (kde#449918)
  * applets/battery: adjust show/hide conditions for charge limits (kde#435931)
  * applets/systemtray: fix SNI context menu usage without libappindicator (kde#449870)
  * applets/notifications: Increase implicit size of standalone popup (kde#448383)
  * applets-digital/clock: Add workaround for QTBUG-83890 (kde#448387)
  * Clean up "empty" mimeType containg only whitespaces
  * dataengines/apps: Use KIO::ApplicationLauncherJob for starting KService
  * [containmentactions/applauncher] Use ApplicationLauncherJob instead of OpenUrlJob (kde#449900)
  * Desktop: Still show services with nodisplay=true set (kde#449243)
  * appstream runner: De-duplicate results from multiple sources (kde#448619)
  * Fix ksplash always using default theme. (kde#446966)
  * kcms/users: Fix missing template arguments before reply in FingerprintModel
  * De-duplicate 'Uninstall or manage addons' option in the context menu of Kickoff (kde#448564)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645531200">- Update to 5.24.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.2
- Changes since 5.24.1:
  * applets/clipboard: Focus on the search field for the first time opening the applet
  * applets/clipboard: Make Up/Down arrow keys work in ClipboardPage (kde#448811,kde#450040)
  * applets/panelspacer: Fix optimal size calculation (kde#431668)
  * Fix overdraw on Wayland
  * PanelView: Do not crash when the state is transitioning (kde#373461)
  * Fix launch kscreen kcm in font kcm.
  * Don't install two copies of kcm_fontinst
  * Lock/login themes: stop adjusting shadows based on color scheme (kde#449985)
  * Top-align lock/login/logout screen action buttons (kde#450238)
  * [kcms/user] Set interactive auth flag for more calls (kde#450122)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1645704000">- Add patch to fix log output of some processes (boo#1196206):
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1646654400">- Replace %_libdir/libexec with %_libexecdir (boo#1174075)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1646740800">- Update to 5.24.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.3
- Changes since 5.24.2:
  * kcms/colors: Implement radio button layouts better
  * kcms/colors: fix spacing between radio buttons and content
  * [Battery Monitor] Only show charge threshold hint for power supply batteries (kde#451161)
  * [Icons KCM] Give measure delegate a text
  * wallpapers: Sort BackgroundListModel by title
  * applets/digital-clock: Fix `Qt.formatDateTime` returns different date when minute changes (kde#436796)
  * applets/systray: align applet labels with differing line counts in hidden view (kde#438347)
  * Show panel config above other windows (kde#450794)
  * Use current accent colour to set ColorDialog object in colour picker
  * SystemDialog: Allow accepting the dialogs with the keyboard (kde#450223)
  * applets/systemtray: Do not open context menu on mouse pressed for SNI (kde#409768)
  * Revert "Fix overdraw on Wayland"
  * startkde: Forward stdout/stderr of started processes
  * SDDM theme: stop eliding people's names so aggressively (kde#450673)
  * applets/digital-clock: Word-wrap date string for desktop representation (kde#450632)
  * wrap completely the invariants timer in NDEBUG
  * ScreenPool as the source of truth of QScreen info
  * Always ensure there is an user selected (kde#450182)
  * Prevent panel going out of screen boundaries
  * applets/clipboard: Focus on text area when transition is done
  * applets/clipboard: Fix highlight after exiting edit mode
- Drop patches, now upstream:
  * 0001-startkde-Forward-stdout-stderr-of-started-processes.patch
- Restore compatibility with older kf5-filesystem</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1648555200">- Update to 5.24.4
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma/5/5.24.4
- Changes since 5.24.3:
  * kcms/users: Adjust for padding in overlay sheet (kde#451031)
  * [Media Controller] Explicitly set slider "to" before setting "value"
  * [Notifications] Fix implicit size propagation in SelectableLabel
  * applets/kicker: Skip creating KService for non-desktop files or folders (kde#442970)
  * Fix sleep/suspend sometimes not working ... from ksmserver-logout-greeter, by making the DBus calls synchronous.
  * kicker/actionlist: Ensure we parse the args for the jumplist actions (kde#451418)
  * libtaskmanager: recompute active task when a task is removed
  * sddm/lockscreen: Fix weird behaviour
  * [Notifications] Limit notification heading line count</changelog>
  <changelog author="Fushan Wen &lt;qydwhotmail@gmail.com&gt;" date="1656590400">- Fix a potential crash when deleting a panel with a system tray applet
  (kde#453726)
  * 0001-applets-systemtray-disconnect-KConfigLoader-signal-w.patch
- Fix a potential crash on logout (kde#454159)
  * 0001-Avoid-crash-in-plasma-session-teardown.patch</changelog>
</package>
</otherdata>